last executing test programs: 1m49.810884326s ago: executing program 2 (id=120): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0xfffffc98}]) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) 1m49.777768659s ago: executing program 2 (id=121): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_unlock', 0x242, 0x2a1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$cgroup_pid(r0, &(0x7f00000002c0), 0x12) 1m49.74533275s ago: executing program 2 (id=122): setresgid(0xee00, 0x0, 0xee00) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r0, 0x0, 0xffffffffffffffff) 1m49.725969772s ago: executing program 2 (id=123): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000200)='./file1\x00', 0x82, &(0x7f0000000540)=ANY=[], 0x81, 0x105c7, &(0x7f00000311c0)="$eJzs3E1rY2UbB/Ar02den3EsMi+68oAIDZjQtJ2iIFJ1Bh2wQ/Fl4UrT5DRkJskpTfrirHWlH8GtIOLOz+DGrzG4EFwJ7kaUnHMqU2cWajONM/394PR/nzv3uXqfEApXUhLAsTWb/PpLJS7E2YiYiYjzEfm4Uh65lSKejYjnI+LEfUelnP9z4lREnIuIC+PiRc1K+dDyb3fvffXcjVc//+ZutfHT119O766BaXsxIvqbxXi3X2TWKfJWOd/c6ebZX9ops3igf7s8z4rcTdfzCrvN/XXNPBc7xfpsc3s4zo1eszXOTncjn98cFL9wuNPZr5NfcKu5lZ+30/U8u8Msz86dYl97Zd4Zjoo67bLeJ3n5GI32s5hP99LifjZv59kajMr5om7WTvfKP73FforpaGW9dr6P9X/3HD8O3ukOtveSnXRr2M0GydV64+V6Y7nW2Mra6ShdqjX77eWlZK7TGy+rjdJmf6WTZZ1eWm9l/Woy12m1ao1GMnctXe82B0mjUV+sz9euVsvRS8lbNz9Ieu1kbpxvdAfbo25vmGxkW0lxRTVZqC++Uk1eaCTvra4la+9ev7669v5H1z68+frqjTfLRQ9sK5lbmF9YqDXmawuNqvs/jMrhLue48wIC+Mf0/8A06P8f6P9jp0z9//Hpf4/7/WvfOBQvIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAY+vHk9+9nQ9mi/P/l/NPlVPPRMSViLgcEZci4veHmIlTB2pejIhKOX7Y+pN/2cP3lcgrjK85XR7nImKlPO49/aifBQAAAHhyffvDp59FzIyH+Y/Xpr0hjlL5ps2ZSdXL3/L536SqXcyL7U2o2qX9khNxOSJOzv48oWpXIuLE+Y8nVO1vmTkQZ+6LShEnjnI3AADA0TjYCUysewMAAOA/54tpb4DpyD+vLf8Xv/ws+HQR5QeCZw+cAQAAAI+hyrQ3AAAAADxyef/v+/8AAADgyVZ8/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+wczc5SwNxHID/UCv4FYjh4wIewCUr45IFh/AILj2A3sYdZzAhnAN3HsGAoR2JRdRFB0p8nyeBmWnhl2kTFjNDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCavpbr5eftx09tc/aHfygi4i+n81wNAAAAcMmuXC+ryrhuP0vHX6RDLyNiHhGziJj+YQhfxONG5iQieql+6fPlWR++RFQJx+8M0uvVqD73NiK+j656CwAAAOC/tt0sVhHFsVq9vTnVeADSpM0wV1415fMoV9qkCvvwup8lbfozMotZRJTjb5nS5hHRf/4utW7y+ysaxfCXolcXee46AABwV5ojgWyjNwAAAO7O+647QDeq9dr0X/y0Fjyoi7Qg+KTRAgAAAO7X+dP2J73b9gMAAADoQDX+/23/vzQr0PX+f0/T3n/2/wMAAIB26v3/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuKZduV5uN4tV25z9oZ08VwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAD/bnIAVCGIoBaGbojHqn4v2PJYHi0q2b96AQErr4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCTz3r5Jjnu9kwy2jb8Ws0k/04NW6eGvfNcX8d88xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC725+4EQiAIwmDf+Z/TYv5hSYPGIEIVLHzMMA8LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/1u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWF/bm3TRgI4zj82kmUuE1GSG/xMQMNFYIR+JCQLHkGBmAhGipai0VgBRBw0NKZgudp/j+drrgDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4D2dnt74iIjs85F55MPV3+Fy8BX5umkG39fMNsd9/XPLyXY3Svkb4/8iIorIWvgNAED7yvumWCyreSdtN20vbT9tOa2r2SsfDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGd27qAlijCMA/izq7ulQdAxgwg61CU3NctgLx0E70FQN9FNpLVC96DixU8QderaN4i81VfoCwQdSujQwUNBlyCKdUd9pSVWgpnNfj94Z/56mHnfPSw887yzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzJzmac2suliBgZPMht775szHU7v3nyfmRvfL71+nx6zfYlKhFxf7HZuJrjWvrdytr6g9lms7EsCELeoRx9MY1uoehvJgAAjptKdm7X9R8rWzO7uR7x88Xh+v9SkuMP9f+n52fP7Y0fq29b6b3S+n8sl9X9G2qtpce1lbX1K4tLswuNhcbDiYnxyeuT127eGK/tPiupeWICAADA36lmI63/y/Xf+//DSY4e6/870/fupvcaUP93ddD0K3omAAAA/7czF759LXX5f6lajdXZVmt5rHPc/3u8cyxgqkd2Ihtp/T9QL3pWAAAAQB52NkuH+v/zSY4e+/+jrza202sORMRQ1v8fnXvUnM9vOX0tj9eJi14jAAAAxRrKRtr/r9QjhqO8v+WhHBGXL3Zy9jOAPdX/H57dPvTSerr/fyK/Jfal8lTn89g9T0UMTr08XfScAAAAOL5OZqNd7G9XtmaWvz+drtr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxix45RGgiiMADPZnfVRhKwUisvINpZBSwEsfEQoiB4AhHEA4itpXew9A6pFWwsLFN4AmVmMwbShBRJXPw+SP5HeCQvu82+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCq4eG4LuNbr6k7o89ev27OYr5NZPT5uLkdX7EuFjl0CxUHy54AAACA/6DM+30I4aN+Po7Z6Yfw3R33xJ3/ab2pi6rJyb0/58vD+1be/29Pd65/v6TX/E4dQri4vDrfW9QfbIHu1I4qnaSks5cy3ZDOyd3GsE7Xs7gfDI5WUrma+9fmPDEAMKvdnKMiPw/F3F/mYAC0XjVDX+7N+3/Zn99cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/FTwAAAP//HShbAA==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) 1m48.790788946s ago: executing program 2 (id=139): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x82, 0x74) io_setup(0x4fe, &(0x7f00000009c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000004080)="a0", 0x1, 0xa}]) 1m48.690720462s ago: executing program 2 (id=142): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r1 = dup(r0) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) 1m48.690625302s ago: executing program 32 (id=142): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r1 = dup(r0) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) 1m44.471995685s ago: executing program 5 (id=315): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 1m44.241701029s ago: executing program 5 (id=320): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5608, 0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) 1m44.23087497s ago: executing program 5 (id=321): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) 1m44.144766705s ago: executing program 5 (id=322): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x800880, &(0x7f0000000040), 0x1, 0x481, &(0x7f0000000bc0)="$eJzs3M9vFFUcAPDvTLuF8sNWxB/8UKtobPzRUkDl4EGNJh4wMdGDHpu2EGShhtaEEqJgDJ6MMfFuvJj4L3jSizGeTLzq3ZAQwwXwtGZ2Zsp22V0KbLvF/XySgfdm3vS9b9+8nTfz2gbQt8ayf5KIbRHxZ0SM5NmVBcby/65dOTdz/cq5mSRqS+/+k9TLXb1ybqYsWp63tciMpxHp50nsaVHvwtLZE9PV6tzpIj+5ePKjyYWlsy8cPzl9bO7Y3KkDhw8fOjj18ksHXuxKnFmbru7+ZH7vrrc++PrtI19m+4bK+Jvi6JKxTgefrtW6XF1vbW9IJ4PNR3eub2NYtYGIyLqrUh//IzEQNzpvJN78rKeNA9ZUrVarbW1/+HwN+B/b0vBJkDHkoV+UN/rs+bfcmicBr67N1GNDuPxa/gCUxX2t2PIjg5EWZSpNz7fdNBYR75//99tsi7V5DwEAsMJP2fzn+VbzvzQeaih3X7E2NBoR90fEjoh4oHiz/2BEvezDEfHIbdbfvEhy8/wnvXRHga1SNv97pVjbWjn/K2d/MTpQ5LbX468kR49X5/YX35PxqGzK8lMd6vj5jT++anescf6XbVn95VywaMelwU0rz5mdXpy+m5gbXb4QsXuwVfzJ8kpAEhG7ImJ344k3rfG0d/zZH/a2O3br+Du4jTa0U/su4pm8/89HU/ylpPP65OTmqM7tnyyvipv99vvFd9rVf1fxd0HW/1taXv/L8Y8mjeu1C7dfx8W/vmj7TLPK63+08Zzs+h9K3qunh4p9Z6YXF09PRQwlR/JGN+4/cOPcMl+Wz+If39d6/O+IG9+JPRGRXcSPRsRjEfF40fYnIuLJiNjXIf5fX3/qw7bxfz8c0eP+n71l/2cDrez/5QthaSia97RODJz45ccVlTb0ZtH/1zv3/6F6arzYs5rPv9W0686uZgAAALj3pBGxLZJ0YjmdphMT+c/L74xIq/MLi88dnf/41Gz+OwKjUUnLN10jDe9Dp4rH+jx/ISLyHy0ojx8s3ht/MzBcz0/MzFdnex089LmtbcZ/5u+BXrcOWHNdWEcD7lFtxr/bP/QB93/oX63H//C6twNYfy3Gv8EPfaLV/f/THrQDWH9N4997P+gj3v9B/zL+oX8Z/9CXFobj1r8k3zFRfqWWZco/LXxnVQyeyc++yxb2JhGVDdGMPLG5+1850g0Q11omNsWGaEavEj36QAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiy/wIAAP//QBTSXw==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x804000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m44.000129293s ago: executing program 5 (id=326): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x2c, r1, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) 1m43.798437455s ago: executing program 5 (id=331): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @loopback, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="5e54e574da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}, {0x0, 0x28}], 0x2}}], 0x1, 0x44080) 1m43.798344494s ago: executing program 33 (id=331): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @loopback, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="5e54e574da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}, {0x0, 0x28}], 0x2}}], 0x1, 0x44080) 1m21.045827021s ago: executing program 0 (id=1123): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00') write$tcp_mem(r0, &(0x7f0000000140)={0x0, 0x20, 0x2, 0x20, 0xfffffffffffffffe}, 0x48) read$FUSE(r0, 0x0, 0x0) 1m21.007241353s ago: executing program 0 (id=1126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0xd8, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0xa8, 0x8, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x7c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0xa}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1m20.980648885s ago: executing program 0 (id=1129): r0 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioprio_get$pid(0x2, r0) 1m20.137343483s ago: executing program 0 (id=1157): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x0, &(0x7f0000000080)={[{@auto_da_alloc}, {@auto_da_alloc}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000380), 0x1214420, 0x0) 1m19.957380834s ago: executing program 0 (id=1163): timer_create(0x2, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000100)) 1m19.657793502s ago: executing program 0 (id=1173): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$rfkill(r0, &(0x7f00000000c0), 0x8) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) 1m19.657703512s ago: executing program 34 (id=1173): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$rfkill(r0, &(0x7f00000000c0), 0x8) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) 47.292244744s ago: executing program 1 (id=2173): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@bridge_delneigh={0x1c, 0x1c, 0xc07, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x0, 0x40, 0xa2, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 47.115714514s ago: executing program 1 (id=2179): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file2\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11c1, &(0x7f0000001240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) 46.989768902s ago: executing program 1 (id=2184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)={0x0, 0x4, [@dev, @local, @broadcast, @dev]}) 46.877152628s ago: executing program 1 (id=2186): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x800080, &(0x7f00000000c0)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@errors_remount}]}, 0x1, 0x473, &(0x7f0000002fc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x804000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 45.752369883s ago: executing program 1 (id=2201): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x24, 0x1, 0xd, [{@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x8}, {@remote}]}]}}}], 0x38}, 0x0) 45.569021193s ago: executing program 1 (id=2202): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000001000)) 45.568952504s ago: executing program 35 (id=2202): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, 0x0, &(0x7f0000001000)) 43.291248076s ago: executing program 3 (id=2250): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x500a8, 0x0) 43.182097412s ago: executing program 3 (id=2254): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x3b00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 42.938279826s ago: executing program 3 (id=2257): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x9a) 42.906139388s ago: executing program 3 (id=2258): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x1805a, &(0x7f0000000000)=ANY=[], 0x1, 0x105ca, &(0x7f0000004240)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 42.300037363s ago: executing program 3 (id=2265): setresuid(0xee01, 0xee01, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 41.796871322s ago: executing program 3 (id=2271): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_BCN_ORD={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x18801}, 0x0) 41.763776644s ago: executing program 36 (id=2271): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_BCN_ORD={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x18801}, 0x0) 20.91632204s ago: executing program 4 (id=2948): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe) listen(r0, 0x100) 20.896832511s ago: executing program 4 (id=2949): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000340)=r1) 20.895819391s ago: executing program 4 (id=2951): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000080000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000001d8500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000540)="561e7d836b8c907a000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 20.876286443s ago: executing program 4 (id=2953): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) 20.875112623s ago: executing program 4 (id=2956): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3, &(0x7f00000001c0)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@resuid}]}, 0x1, 0x625, &(0x7f0000000800)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0xbb) 20.797032967s ago: executing program 4 (id=2958): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 20.796958547s ago: executing program 37 (id=2958): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 9.129205642s ago: executing program 9 (id=3017): unshare(0x64000600) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4000032, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000200)="24fc911e918c74ad7a0e599e17a90eca", 0x10) 7.521557855s ago: executing program 7 (id=3018): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="920a050000000000480012800e00010069703667726574617000000034000280140007"], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) 7.521079656s ago: executing program 8 (id=3019): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x80000) close_range(r0, 0xffffffffffffffff, 0x2) epoll_pwait(r1, &(0x7f00000008c0)=[{}], 0x1, 0x6545eb97, 0x0, 0x0) 7.520931705s ago: executing program 6 (id=3020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 7.519945496s ago: executing program 9 (id=3021): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x58, 0x54, 0x93d, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x2, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x3, 0x0, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}}, 0x0) 5.809401314s ago: executing program 7 (id=3022): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r1}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r0}) 5.808492064s ago: executing program 8 (id=3023): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3f, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000001", 0x9, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x9, 0x0, @opaque="ff"}}}}}}, 0x0) 5.807414755s ago: executing program 6 (id=3024): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) close_range(r0, r0, 0x2) accept$unix(r0, 0x0, 0x0) getsockname$packet(r0, 0x0, 0x0) 5.807299704s ago: executing program 9 (id=3025): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x9, 0xfffff034}, {0x6, 0xf6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x3c}], 0x1}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 3.98506151s ago: executing program 7 (id=3026): close(0xffffffffffffffff) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x3, 0x2, 0x0, &(0x7f0000048000), 0x0) 3.98401318s ago: executing program 8 (id=3027): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x3000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000000)) 3.98387561s ago: executing program 6 (id=3028): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@setlink={0x28, 0x13, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x2424, 0x1920}, [@IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x20048000) 3.98312484s ago: executing program 9 (id=3029): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xe}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9880030000000000200012800b00010065727370616e000010000280040012000800150022760700140003006e696376663000"], 0x54}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.065321111s ago: executing program 7 (id=3030): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) 2.064254121s ago: executing program 8 (id=3031): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) read$char_usb(r0, &(0x7f00000002c0)=""/106, 0x6a) sendfile(r1, r0, 0x0, 0x3fffff) 2.062102271s ago: executing program 6 (id=3032): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001004e240000060002004e2400001400050000000000000000000000000000000001080002"], 0x1f0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 2.061864631s ago: executing program 9 (id=3033): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=""/65, 0x41}, 0x8}], 0x1, 0x0, 0x0) 2.044536532s ago: executing program 8 (id=3034): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 38.381978ms ago: executing program 7 (id=3035): socket$inet6(0xa, 0x200000000003, 0x87) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x6f) syz_open_dev$usbfs(0x0, 0x76, 0x103901) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff00005403cb0086dd6003136c00088700fc020000000000000000000000000001ff02000000000000000000000000000100400000"], 0x0) 38.213728ms ago: executing program 8 (id=3036): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) 36.474348ms ago: executing program 6 (id=3037): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x3fc, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008c40) 36.366548ms ago: executing program 9 (id=3038): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) sendfile(r1, r1, 0x0, 0xc) 7.71408ms ago: executing program 7 (id=3039): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@journal_ioprio}, {@quota}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") r0 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r0, 0x0, 0x9, 0x2000403) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000004180)={0x2, 0x1, 0x0, 0x1, 0x54}) 0s ago: executing program 6 (id=3040): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) kernel console output (not intermixed with test programs): t_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 51.380763][ T434] usb 1-1: USB disconnect, device number 7 [ 51.383543][ T54] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 51.412395][ T296] attempt to access beyond end of device [ 51.412395][ T296] loop4: rw=2049, want=40976, limit=40427 [ 51.423945][ T54] asix: probe of 2-1:0.34 failed with error -71 [ 51.431496][ T54] usb 2-1: USB disconnect, device number 7 [ 51.485477][ T2895] netlink: 'syz.6.1089': attribute type 32 has an invalid length. [ 51.503566][ T2895] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1089'. [ 51.624983][ T1568] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.643492][ T1568] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 51.664041][ T1568] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 51.683004][ T1568] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.700778][ T1568] usb 4-1: config 0 descriptor?? [ 51.717056][ T2936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 51.834542][ T2938] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 51.844526][ T2938] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.870700][ T2938] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 51.879178][ T2938] System zones: 0-1, 3-36 [ 51.891015][ T2955] device vlan3 entered promiscuous mode [ 51.897908][ T2938] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 51.910517][ T2955] device bridge0 entered promiscuous mode [ 51.944758][ T2961] xt_hashlimit: size too large, truncated to 1048576 [ 52.037073][ T2970] syz.0.1123 (2970): /proc/2969/oom_adj is deprecated, please use /proc/2969/oom_score_adj instead. [ 52.168834][ T2989] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 52.170490][ T2994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1133'. [ 52.187363][ T1568] samsung 0003:0419:0600.0011: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.3-1/input0 [ 52.278836][ T3001] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 52.286614][ T3001] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.298365][ T3001] EXT4-fs (loop1): 1 truncate cleaned up [ 52.304763][ T3001] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,nomblk_io_submit,noinit_itable,inode_readahead_blks=0x0000000000000010,nodiscard,quota,,errors=continue [ 52.379370][ T3006] EXT4-fs (loop4): Ignoring removed oldalloc option [ 52.379447][ T3001] EXT4-fs warning (device loop1): ext4_group_extend:1834: can't read last block, resize aborted [ 52.391466][ T756] usb 4-1: USB disconnect, device number 9 [ 52.411893][ T3006] EXT4-fs (loop4): 1 truncate cleaned up [ 52.417680][ T3006] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,errors=continue,oldalloc,stripe=0x0000000000000005, [ 52.437706][ T3006] EXT4-fs (loop4): Online resizing not supported with sparse_super2 [ 52.449643][ T3015] devpts: called with bogus options [ 52.664869][ T3035] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 52.673936][ T3035] ext4 filesystem being mounted at /257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.774472][ T3042] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 52.784814][ T3042] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 52.792773][ T3042] System zones: 1-12 [ 52.796967][ T3042] EXT4-fs (loop4): orphan cleanup on readonly fs [ 52.803396][ T3042] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.1151: invalid indirect mapped block 12 (level 1) [ 52.816788][ T3042] EXT4-fs (loop4): Remounting filesystem read-only [ 52.823302][ T3042] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.1151: invalid indirect mapped block 2 (level 2) [ 52.837059][ T3042] EXT4-fs (loop4): 1 truncate cleaned up [ 52.842766][ T3042] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,noload,errors=remount-ro,i_version [ 52.859988][ T3042] overlayfs: upper fs is r/o, try multi-lower layers mount [ 53.055925][ T3061] FAT-fs (loop3): Directory bread(block 64) failed [ 53.056767][ T3058] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,auto_da_alloc,,errors=continue [ 53.063654][ T3058] ext4 filesystem being mounted at /234/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.079784][ T3061] FAT-fs (loop3): Directory bread(block 65) failed [ 53.100353][ T3061] FAT-fs (loop3): Directory bread(block 66) failed [ 53.107237][ T3061] FAT-fs (loop3): Directory bread(block 67) failed [ 53.114090][ T3061] FAT-fs (loop3): Directory bread(block 68) failed [ 53.120617][ T3061] FAT-fs (loop3): Directory bread(block 69) failed [ 53.121335][ T277] EXT4-fs error (device loop0): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 53.127526][ T3061] FAT-fs (loop3): Directory bread(block 70) failed [ 53.137962][ T277] EXT4-fs error (device loop0): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 53.144838][ T3061] FAT-fs (loop3): Directory bread(block 71) failed [ 53.155541][ T277] EXT4-fs error (device loop0): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 53.161842][ T3061] FAT-fs (loop3): Directory bread(block 72) failed [ 53.172530][ T277] EXT4-fs error (device loop0): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 53.178580][ T3061] FAT-fs (loop3): Directory bread(block 73) failed [ 53.201246][ T277] EXT4-fs error (device loop0): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 53.222855][ T277] EXT4-fs error (device loop0): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 53.235494][ T277] EXT4-fs error (device loop0): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 53.246475][ T277] EXT4-fs error (device loop0): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 53.257286][ T277] EXT4-fs error (device loop0): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 53.271023][ T277] EXT4-fs error (device loop0): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 53.480367][ T3092] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.488625][ T3092] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.496449][ T3092] device bridge_slave_0 entered promiscuous mode [ 53.503397][ T3092] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.510593][ T3092] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.518213][ T3092] device bridge_slave_1 entered promiscuous mode [ 53.565031][ T3092] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.572141][ T3092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.579451][ T3092] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.586503][ T3092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.614745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.622650][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.630810][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.649668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.657995][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.665065][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.674081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.682278][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.689336][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.710011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.721795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.740892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.754905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.763149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.771139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.778872][ T3092] device veth0_vlan entered promiscuous mode [ 53.783638][ T286] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 53.790928][ T3092] device veth1_macvtap entered promiscuous mode [ 53.799428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.811666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.824217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.880550][ T3131] fuse: Bad value for 'fd' [ 53.918082][ T49] device bridge_slave_1 left promiscuous mode [ 53.924536][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.931806][ T49] device bridge_slave_0 left promiscuous mode [ 53.938002][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.946007][ T49] device veth1_macvtap left promiscuous mode [ 53.963150][ T3139] FAT-fs (loop7): Directory bread(block 64) failed [ 53.966316][ T49] device veth0_vlan left promiscuous mode [ 53.971500][ T3139] FAT-fs (loop7): Directory bread(block 65) failed [ 53.982581][ T3139] FAT-fs (loop7): Directory bread(block 66) failed [ 53.989719][ T3139] FAT-fs (loop7): Directory bread(block 67) failed [ 53.996649][ T3139] FAT-fs (loop7): Directory bread(block 68) failed [ 54.003379][ T3139] FAT-fs (loop7): Directory bread(block 69) failed [ 54.010848][ T3139] FAT-fs (loop7): Directory bread(block 70) failed [ 54.017516][ T3139] FAT-fs (loop7): Directory bread(block 71) failed [ 54.023575][ T286] usb 2-1: Using ep0 maxpacket: 32 [ 54.024331][ T3139] FAT-fs (loop7): Directory bread(block 72) failed [ 54.024346][ T3139] FAT-fs (loop7): Directory bread(block 73) failed [ 54.183647][ T286] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 54.193588][ T3154] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 54.200776][ T3154] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.216544][ T286] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 54.227001][ T286] usb 2-1: config 0 has no interface number 0 [ 54.227895][ T3154] EXT4-fs error (device loop3): ext4_orphan_get:1421: comm syz.3.1201: bad orphan inode 16 [ 54.243650][ T286] usb 2-1: config 0 interface 217 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 54.264378][ T3154] ext4_test_bit(bit=15, block=4) = 0 [ 54.266935][ T286] usb 2-1: config 0 interface 217 has no altsetting 0 [ 54.269759][ T3154] EXT4-fs (loop3): 1 orphan inode deleted [ 54.282656][ T3154] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,max_dir_size_kb=0x000000000000004a,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000010000,acl,mblk_io_submit,init_itable=0x0000000000000008,journal_dev=0x000000007ffffffe,bsdgroups,,errors=continue [ 54.443595][ T286] usb 2-1: New USB device found, idVendor=5372, idProduct=2303, bcdDevice=a1.0d [ 54.449221][ T3164] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 54.462373][ T286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.471574][ T3164] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 54.480890][ T3164] F2FS-fs (loop4): invalid crc value [ 54.487222][ T286] usb 2-1: Product: syz [ 54.491461][ T286] usb 2-1: Manufacturer: syz [ 54.496226][ T286] usb 2-1: SerialNumber: syz [ 54.502620][ T3164] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 54.506859][ T286] usb 2-1: config 0 descriptor?? [ 54.523576][ T756] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 54.545186][ T3164] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 54.554083][ T286] pl2303 2-1:0.217: required endpoints missing [ 54.554595][ T3164] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 54.604822][ T3183] FAT-fs (loop3): Directory bread(block 64) failed [ 54.611466][ T3183] FAT-fs (loop3): Directory bread(block 65) failed [ 54.618653][ T3183] FAT-fs (loop3): Directory bread(block 66) failed [ 54.625789][ T3183] FAT-fs (loop3): Directory bread(block 67) failed [ 54.632354][ T3183] FAT-fs (loop3): Directory bread(block 68) failed [ 54.639206][ T3183] FAT-fs (loop3): Directory bread(block 69) failed [ 54.646178][ T3183] FAT-fs (loop3): Directory bread(block 70) failed [ 54.652766][ T3183] FAT-fs (loop3): Directory bread(block 71) failed [ 54.659466][ T3183] FAT-fs (loop3): Directory bread(block 72) failed [ 54.666072][ T3183] FAT-fs (loop3): Directory bread(block 73) failed [ 54.775674][ T24] kauditd_printk_skb: 26 callbacks suppressed [ 54.775685][ T24] audit: type=1400 audit(2000000030.609:435): avc: denied { setopt } for pid=3195 comm="syz.3.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.779490][ T3192] ------------[ cut here ]------------ [ 54.807108][ T3192] EA inode 11 i_nlink=2 [ 54.807210][ T3192] WARNING: CPU: 0 PID: 3192 at fs/ext4/xattr.c:1018 ext4_xattr_inode_update_ref+0x4cf/0x520 [ 54.818090][ T286] usb 2-1: USB disconnect, device number 8 [ 54.823779][ T3192] Modules linked in: [ 54.831204][ T3192] CPU: 0 PID: 3192 Comm: syz.4.1216 Not tainted syzkaller #0 [ 54.839312][ T3192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.849755][ T3192] RIP: 0010:ext4_xattr_inode_update_ref+0x4cf/0x520 [ 54.861055][ T3202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 54.861286][ T3192] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 22 01 be ff 49 8b 37 48 c7 c7 60 de 2c 85 89 da e8 81 83 98 02 <0f> 0b 4c 8b 6c 24 10 4c 8b 7c 24 08 e9 ab fe ff ff e8 cb 27 9c 02 [ 54.871833][ T3202] device vlan2 entered promiscuous mode [ 54.896232][ T3192] RSP: 0018:ffffc90000bd7020 EFLAGS: 00010246 [ 54.896244][ T3202] device dummy0 entered promiscuous mode [ 54.909238][ T3192] RAX: 39d6749ab4bab200 RBX: 0000000000000002 RCX: 0000000000080000 [ 54.913691][ T756] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.921155][ T3192] RDX: ffffc90003553000 RSI: 000000000001f526 RDI: 000000000001f527 [ 54.931687][ T756] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.941451][ T3192] RBP: ffffc90000bd7110 R08: ffff8881f7027453 R09: 1ffff1103ee04e8a [ 54.952860][ T3192] R10: dffffc0000000000 R11: ffffed103ee04e8b R12: dffffc0000000000 [ 54.961435][ T3192] R13: ffff88811b72aaf0 R14: 1ffff110236e558a R15: ffff88811b72ab30 [ 54.969858][ T3192] FS: 00007f92f7e4a6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 54.979274][ T3192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.986477][ T3192] CR2: 00007f4853b08060 CR3: 000000010f41e000 CR4: 00000000003506b0 [ 54.995074][ T3192] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.003164][ T3192] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.011447][ T3192] Call Trace: [ 55.014983][ T3192] ? ext4_xattr_block_csum+0x560/0x560 [ 55.020449][ T3192] ? __kasan_check_write+0x14/0x20 [ 55.025858][ T756] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 55.025883][ T3192] ? ext4_xattr_inode_iget+0x264/0x350 [ 55.035071][ T756] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 55.040817][ T3192] ext4_xattr_set_entry+0xef3/0x3860 [ 55.049420][ T756] usb 8-1: SerialNumber: syz [ 55.055530][ T3192] ? ext4_xattr_ibody_set+0x360/0x360 [ 55.064999][ T3192] ? __ext4_xattr_check_block+0x7e5/0x8e0 [ 55.070776][ T3192] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 55.076342][ T3192] ext4_xattr_ibody_set+0x122/0x360 [ 55.081587][ T3192] ext4_expand_extra_isize_ea+0x115c/0x1a00 [ 55.087513][ T3192] __ext4_expand_extra_isize+0x2fe/0x3e0 [ 55.093147][ T3192] __ext4_mark_inode_dirty+0x3cf/0x610 [ 55.098784][ T3192] ext4_evict_inode+0xea1/0x1770 [ 55.103964][ T3192] ? _raw_spin_unlock+0x4d/0x70 [ 55.108886][ T3192] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 55.115052][ T3192] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 55.121034][ T3192] evict+0x4ae/0x930 [ 55.124992][ T3192] ? mode_strip_sgid+0x160/0x160 [ 55.129968][ T3192] ? __kasan_check_write+0x14/0x20 [ 55.135134][ T3192] iput+0x638/0x7c0 [ 55.138933][ T3192] ext4_orphan_cleanup+0x96c/0xd30 [ 55.144082][ T3192] ext4_fill_super+0x865f/0x8d70 [ 55.149038][ T3192] ? ext4_mount+0x40/0x40 [ 55.153340][ T3192] ? vscnprintf+0x80/0x80 [ 55.157691][ T3192] ? set_blocksize+0x1ed/0x3b0 [ 55.162444][ T3192] ? sb_set_blocksize+0xaa/0xf0 [ 55.167304][ T3192] mount_bdev+0x28b/0x3a0 [ 55.171627][ T3192] ? ext4_mount+0x40/0x40 [ 55.175964][ T3192] ext4_mount+0x34/0x40 [ 55.180112][ T3192] legacy_get_tree+0xed/0x190 [ 55.184935][ T3192] ? ext4_chksum+0x180/0x180 [ 55.189542][ T3192] vfs_get_tree+0x89/0x260 [ 55.194241][ T3192] do_new_mount+0x25a/0xa20 [ 55.199213][ T3192] path_mount+0x585/0xc90 [ 55.203578][ T3192] __se_sys_mount+0x320/0x390 [ 55.208262][ T3192] ? __x64_sys_mount+0xd0/0xd0 [ 55.213011][ T3192] ? debug_smp_processor_id+0x17/0x20 [ 55.218427][ T3192] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 55.224501][ T3192] __x64_sys_mount+0xbf/0xd0 [ 55.229066][ T3192] do_syscall_64+0x31/0x40 [ 55.233547][ T3192] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 55.239431][ T3192] RIP: 0033:0x7f92f93eef4a [ 55.243936][ T3192] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.263558][ T3192] RSP: 002b:00007f92f7e49e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 55.272118][ T3192] RAX: ffffffffffffffda RBX: 00007f92f7e49ee0 RCX: 00007f92f93eef4a [ 55.280175][ T3192] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f92f7e49ea0 [ 55.288197][ T3192] RBP: 0000200000000180 R08: 00007f92f7e49ee0 R09: 0000000000800700 [ 55.296202][ T3192] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 55.304265][ T3192] R13: 00007f92f7e49ea0 R14: 000000000000046f R15: 0000200000000400 [ 55.312349][ T3192] ---[ end trace da0f11f37706709a ]--- [ 55.317960][ T3192] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #18: comm syz.4.1216: iget: bad extra_isize 90 (inode size 256) [ 55.332112][ T3192] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1216: error while reading EA inode 18 err=-117 [ 55.345130][ T756] usb 8-1: 0:2 : does not exist [ 55.351325][ T3192] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #18: comm syz.4.1216: iget: bad extra_isize 90 (inode size 256) [ 55.369101][ T756] usb 8-1: USB disconnect, device number 2 [ 55.376401][ T3192] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1216: error while reading EA inode 18 err=-117 [ 55.390597][ T3192] EXT4-fs (loop4): 1 orphan inode deleted [ 55.396610][ T3192] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005a,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,,errors=continue [ 55.573952][ T301] udevd[301]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.609393][ T3244] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000001,nolazytime,delalloc,i_version,lazytime,nodiscard,grpjquota=,block_validity,errors=remount-ro, [ 55.627483][ T3244] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.642322][ T3244] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #2: block 3: comm syz.4.1242: lblock 8 mapped to illegal pblock 3 (length 26) [ 55.657145][ T3244] EXT4-fs (loop4): Remounting filesystem read-only [ 55.787500][ T3261] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache, [ 55.799312][ T3261] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.812391][ T24] audit: type=1400 audit(2000000031.639:436): avc: denied { rename } for pid=3260 comm="syz.4.1247" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 55.812672][ T3261] EXT4-fs error (device loop4): ext4_empty_dir:3083: inode #12: block 32: comm syz.4.1247: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 55.855505][ T3261] EXT4-fs (loop4): Remounting filesystem read-only [ 55.862023][ T3261] EXT4-fs warning (device loop4): ext4_empty_dir:3085: inode #12: comm syz.4.1247: directory missing '.' [ 55.893413][ T24] audit: type=1400 audit(2000000031.719:437): avc: denied { mounton } for pid=3268 comm="syz.3.1250" path=2F3139362FE91F7189591E9233614B dev="tmpfs" ino=1042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 55.893889][ T3270] 9pnet: p9_fd_create_unix (3270): problem connecting socket: éq‰Y’3aK: -111 [ 56.105838][ T24] audit: type=1400 audit(2000000031.939:438): avc: denied { mount } for pid=3303 comm="syz.4.1267" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 56.163521][ T24] audit: type=1400 audit(2000000031.959:439): avc: denied { remount } for pid=3303 comm="syz.4.1267" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 56.213550][ T24] audit: type=1400 audit(2000000031.979:440): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 56.273497][ T24] audit: type=1326 audit(2000000032.069:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3317 comm="syz.3.1274" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4852d5acb9 code=0x0 [ 56.528961][ T24] audit: type=1326 audit(2000000032.359:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3327 comm="syz.1.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf96a3bcb9 code=0x7ffc0000 [ 56.560085][ T24] audit: type=1326 audit(2000000032.379:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3327 comm="syz.1.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf96a3bcb9 code=0x7ffc0000 [ 56.584302][ T24] audit: type=1326 audit(2000000032.389:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3327 comm="syz.1.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fcf96a3bcb9 code=0x7ffc0000 [ 56.610481][ T3320] F2FS-fs (loop6): invalid crc value [ 56.652846][ T3320] F2FS-fs (loop6): Found nat_bits in checkpoint [ 56.715175][ T3320] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 56.780015][ T3339] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d) [ 56.843601][ T3313] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 56.861034][ T3313] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 56.874739][ T3339] exFAT-fs (loop1): error, invalid size(size(7) > aligned(9223372036854777344) [ 56.874739][ T3339] [ 56.886873][ T3339] exFAT-fs (loop1): Filesystem has been set read-only [ 56.893913][ T3313] F2FS-fs (loop4): invalid crc value [ 56.907419][ T1104] attempt to access beyond end of device [ 56.907419][ T1104] loop6: rw=2049, want=45104, limit=40427 [ 56.910471][ T3313] F2FS-fs (loop4): Found nat_bits in checkpoint [ 56.967481][ T3313] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 56.974648][ T3313] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 57.066872][ T3358] EXT4-fs (loop6): failed to open journal device unknown-block(0,0) -6 [ 57.264546][ T3369] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 57.281125][ T3369] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 57.300474][ T3369] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e801c01c, mo2=0003] [ 57.308916][ T3369] System zones: 0-1, 3-36 [ 57.315037][ T3369] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000400000,delalloc,jqfmt=vfsold,debug,block_validity,noauto_da_alloc,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 57.393798][ T3383] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 57.424714][ T3392] device syz_tun entered promiscuous mode [ 57.434289][ T3392] device syz_tun left promiscuous mode [ 57.446934][ T3394] netlink: 'syz.7.1303': attribute type 30 has an invalid length. [ 57.717176][ T3448] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 57.965197][ T3456] F2FS-fs (loop6): fault_injection options not supported [ 57.966584][ T3471] erofs: (device loop3): mounted with root inode @ nid 36. [ 57.975274][ T3456] F2FS-fs (loop6): invalid crc value [ 58.001102][ T3456] F2FS-fs (loop6): Found nat_bits in checkpoint [ 58.040810][ T3456] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 58.068305][ T1104] attempt to access beyond end of device [ 58.068305][ T1104] loop6: rw=2049, want=45104, limit=40427 [ 58.213267][ T3493] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d) [ 58.230799][ T3493] exFAT-fs (loop3): error, invalid size(size(7) > aligned(9223372036854777344) [ 58.230799][ T3493] [ 58.242095][ T3493] exFAT-fs (loop3): Filesystem has been set read-only [ 58.358036][ T3510] EXT4-fs (loop3): Ignoring removed orlov option [ 58.372178][ T3510] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 58.391877][ T3510] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 58.497892][ T3530] EXT4-fs (loop4): Ignoring removed nobh option [ 58.515228][ T3530] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,,errors=continue [ 58.524805][ T3530] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.539019][ T3530] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #2: block 3: comm syz.4.1363: lblock 8 mapped to illegal pblock 3 (length 26) [ 58.653531][ T286] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 58.654787][ T3543] EXT4-fs (loop6): Ignoring removed bh option [ 58.692608][ T3543] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,sb=0x0000000000000000,bh,init_itable, [ 58.895738][ T3565] EXT4-fs (loop6): Test dummy encryption mode enabled [ 58.902818][ T3565] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 58.914813][ T3565] EXT4-fs error (device loop6): ext4_orphan_get:1421: comm syz.6.1378: bad orphan inode 131083 [ 58.925627][ T3565] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue [ 58.953582][ T756] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 59.043610][ T286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.064751][ T286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.079592][ T286] usb 2-1: New USB device found, idVendor=a86d, idProduct=c626, bcdDevice= 0.00 [ 59.094895][ T286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.107037][ T286] usb 2-1: config 0 descriptor?? [ 59.333837][ T756] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 59.345426][ T756] usb 4-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 59.354724][ T756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.363776][ T756] usb 4-1: config 0 descriptor?? [ 59.574613][ T286] hid-generic 0003:A86D:C626.0012: unbalanced collection at end of report description [ 59.584702][ T286] hid-generic: probe of 0003:A86D:C626.0012 failed with error -22 [ 59.779004][ T286] usb 2-1: USB disconnect, device number 9 [ 59.844480][ T756] wacom 0003:056A:0018.0013: unbalanced delimiter at end of report description [ 59.853610][ T756] wacom 0003:056A:0018.0013: parse failed [ 59.859536][ T756] wacom: probe of 0003:056A:0018.0013 failed with error -22 [ 60.050351][ T756] usb 4-1: USB disconnect, device number 10 [ 60.288365][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 60.288376][ T24] audit: type=1400 audit(2000000036.119:451): avc: denied { map } for pid=3654 comm="syz.7.1420" path="socket:[27033]" dev="sockfs" ino=27033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.318649][ T24] audit: type=1400 audit(2000000036.129:452): avc: denied { accept } for pid=3654 comm="syz.7.1420" path="socket:[27033]" dev="sockfs" ino=27033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.398735][ T24] audit: type=1326 audit(2000000036.229:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3678 comm="syz.7.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df3a4ecb9 code=0x7ffc0000 [ 60.426671][ T24] audit: type=1326 audit(2000000036.229:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3678 comm="syz.7.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1df3a4ecb9 code=0x7ffc0000 [ 60.450400][ T24] audit: type=1326 audit(2000000036.229:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3678 comm="syz.7.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df3a4ecb9 code=0x7ffc0000 [ 60.479335][ T24] audit: type=1326 audit(2000000036.229:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3678 comm="syz.7.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f1df3a4ecb9 code=0x7ffc0000 [ 60.503007][ T24] audit: type=1326 audit(2000000036.229:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3678 comm="syz.7.1432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df3a4ecb9 code=0x7ffc0000 [ 60.623511][ T5] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 60.654123][ T3715] exfat: Deprecated parameter 'utf8' [ 60.659597][ T3715] exfat: Deprecated parameter 'utf8' [ 60.694994][ T3715] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 60.787326][ T3736] tipc: Started in network mode [ 60.792262][ T3736] tipc: Own node identity ff000000000000000000000000000001, cluster identity 4711 [ 60.802110][ T3736] tipc: Enabling of bearer rejected, failed to enable media [ 60.860600][ T3742] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 60.983611][ T5] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.993813][ T5] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.006846][ T3765] fuse: Unexpected value for 'default_permissions' [ 61.013444][ T24] audit: type=1400 audit(2000000036.839:458): avc: denied { mounton } for pid=3764 comm="syz.3.1472" path="/252/file0/file0" dev="loop3" ino=1048724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 61.083533][ T319] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 61.097825][ T5] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 61.108114][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 61.117761][ T5] usb 2-1: SerialNumber: syz [ 61.154188][ T5] usb 2-1: 0:2 : does not exist [ 61.254643][ T3792] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 61.453588][ T297] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 61.463751][ T319] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.475216][ T319] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.485362][ T319] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.498474][ T319] usb 5-1: config 0 interface 0 has no altsetting 0 [ 61.505102][ T319] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 61.514166][ T319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.522902][ T319] usb 5-1: config 0 descriptor?? [ 61.565517][ T5] usb 2-1: USB disconnect, device number 10 [ 61.813593][ T297] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 61.821910][ T297] usb 8-1: config 220 has an invalid descriptor of length 251, skipping remainder of the config [ 61.832371][ T297] usb 8-1: config 220 has no interface number 2 [ 61.838650][ T297] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 61.851804][ T297] usb 8-1: config 220 interface 0 has no altsetting 0 [ 61.858580][ T297] usb 8-1: config 220 interface 76 has no altsetting 0 [ 61.865565][ T297] usb 8-1: config 220 interface 1 has no altsetting 0 [ 61.995299][ T319] magicmouse 0003:05AC:0265.0014: hidraw0: USB HID v0.09 Device [HID 05ac:0265] on usb-dummy_hcd.4-1/input0 [ 62.006872][ T319] magicmouse 0003:05AC:0265.0014: magicmouse input not registered [ 62.015271][ T319] magicmouse: probe of 0003:05AC:0265.0014 failed with error -12 [ 62.025348][ T297] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 62.034555][ T297] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.042692][ T297] usb 8-1: Product: syz [ 62.047154][ T297] usb 8-1: Manufacturer: syz [ 62.051837][ T297] usb 8-1: SerialNumber: syz [ 62.196810][ T54] usb 5-1: USB disconnect, device number 8 [ 62.204839][ T3807] F2FS-fs (loop1): invalid crc value [ 62.224408][ T3807] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 62.252555][ T3807] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 62.259307][ T3807] F2FS-fs (loop1): Start checkpoint disabled! [ 62.266231][ T3807] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 62.333515][ T308] attempt to access beyond end of device [ 62.333515][ T308] loop1: rw=2049, want=45104, limit=40427 [ 62.375947][ T24] audit: type=1400 audit(2000000038.209:459): avc: denied { read } for pid=3819 comm="syz.6.1495" name="usbmon7" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.401801][ T24] audit: type=1400 audit(2000000038.209:460): avc: denied { open } for pid=3819 comm="syz.6.1495" path="/dev/usbmon7" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.426130][ T297] usb 8-1: selecting invalid altsetting 0 [ 62.432370][ T297] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 62.439301][ T297] uvcvideo: No valid video chain found. [ 62.485653][ T297] usb 8-1: USB disconnect, device number 3 [ 62.583778][ T3826] EXT4-fs error (device loop6): ext4_orphan_get:1395: inode #15: comm syz.6.1498: inode has both inline data and extents flags [ 62.606243][ T3834] FAT-fs (loop1): Directory bread(block 64) failed [ 62.607294][ T3826] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.1498: couldn't read orphan inode 15 (err -117) [ 62.612900][ T3834] FAT-fs (loop1): Directory bread(block 65) failed [ 62.612939][ T3834] FAT-fs (loop1): Directory bread(block 66) failed [ 62.612950][ T3834] FAT-fs (loop1): Directory bread(block 67) failed [ 62.612976][ T3834] FAT-fs (loop1): Directory bread(block 68) failed [ 62.612987][ T3834] FAT-fs (loop1): Directory bread(block 69) failed [ 62.613012][ T3834] FAT-fs (loop1): Directory bread(block 70) failed [ 62.625548][ T3826] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,,errors=continue [ 62.631961][ T3834] FAT-fs (loop1): Directory bread(block 71) failed [ 62.681805][ T3834] FAT-fs (loop1): Directory bread(block 72) failed [ 62.691924][ T3834] FAT-fs (loop1): Directory bread(block 73) failed [ 62.754651][ T3845] tipc: Enabling of bearer rejected, failed to enable media [ 63.034581][ T3897] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue [ 63.142352][ T3907] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 63.151013][ T3907] EXT4-fs error (device loop7): ext4_orphan_get:1421: comm syz.7.1534: bad orphan inode 15 [ 63.161579][ T3907] ext4_test_bit(bit=14, block=4) = 1 [ 63.167047][ T3907] is_bad_inode(inode)=0 [ 63.171222][ T3907] NEXT_ORPHAN(inode)=0 [ 63.175524][ T3907] max_ino=32 [ 63.178834][ T3907] i_nlink=1 [ 63.182039][ T3907] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,acl,noload,data_err=ignore,usrjquota="init_itable=0x0000000000000601,init_itable=0x0000000000000100,max_dir_size_kb=0x0000000000000007,,errors=continue [ 63.213669][ T297] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 63.229043][ T3891] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 63.244556][ T3891] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 63.261342][ T3891] F2FS-fs (loop6): Found nat_bits in checkpoint [ 63.287402][ T3891] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 63.294647][ T3891] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 63.333070][ T3891] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 63.523176][ T3934] EXT4-fs (loop1): mounted filesystem without journal. Opts: inlinecrypt,block_validity,,errors=continue [ 63.550949][ T3934] EXT4-fs error (device loop1): ext4_get_first_dir_block:3728: inode #12: block 80: comm syz.1.1544: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 63.572391][ T3934] EXT4-fs error (device loop1): ext4_get_first_dir_block:3730: inode #12: comm syz.1.1544: directory missing '..' [ 63.584627][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.595118][ T297] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 63.608455][ T297] usb 5-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 63.617734][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.626797][ T297] usb 5-1: config 0 descriptor?? [ 63.825616][ T3953] F2FS-fs (loop1): invalid crc value [ 63.836675][ T3953] F2FS-fs (loop1): Found nat_bits in checkpoint [ 63.886233][ T3953] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 63.926880][ T3965] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 63.935176][ T275] attempt to access beyond end of device [ 63.935176][ T275] loop1: rw=2049, want=45104, limit=40427 [ 63.935323][ T3965] EXT4-fs (loop3): orphan cleanup on readonly fs [ 63.953183][ T3965] EXT4-fs error (device loop3): ext4_orphan_get:1395: inode #15: comm syz.3.1555: iget: bad i_size value: 38620345925642 [ 63.966526][ T3965] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.1555: couldn't read orphan inode 15 (err -117) [ 63.978788][ T3965] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 64.084231][ T297] elecom 0003:056E:00FF.0015: item fetching failed at offset 3/5 [ 64.093245][ T297] elecom: probe of 0003:056E:00FF.0015 failed with error -22 [ 64.105338][ T3974] loop1: p1 < > p3 [ 64.110399][ T3974] loop1: p3 size 134217728 extends beyond EOD, truncated [ 64.282311][ T301] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 64.294046][ T297] usb 5-1: USB disconnect, device number 9 [ 64.298895][ T275] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 64.312151][ T298] blk_update_request: I/O error, dev loop1, sector 9 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 64.324776][ T3985] usb usb8: usbfs: process 3985 (syz.3.1563) did not claim interface 0 before use [ 64.329549][ T301] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.347896][ T298] blk_update_request: I/O error, dev loop1, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.356195][ T301] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 64.369039][ T3987] EXT4-fs (loop1): Ignoring removed nobh option [ 64.369952][ T298] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 64.387065][ T3987] EXT4-fs error (device loop1) in ext4_do_update_inode:5350: error 27 [ 64.395787][ T3987] EXT4-fs (loop1): Remounting filesystem read-only [ 64.402319][ T3987] EXT4-fs error (device loop1): ext4_dirty_inode:6157: inode #16: comm syz.1.1561: mark_inode_dirty error [ 64.414617][ T3987] EXT4-fs error (device loop1) in ext4_do_update_inode:5350: error 27 [ 64.423107][ T3987] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #16: comm syz.1.1561: mark_inode_dirty error [ 64.434756][ T3987] EXT4-fs error (device loop1) in ext4_do_update_inode:5350: error 27 [ 64.443070][ T3987] EXT4-fs error (device loop1) in ext4_orphan_del:3292: error 27 [ 64.451143][ T3987] EXT4-fs error (device loop1) in ext4_do_update_inode:5350: error 27 [ 64.460101][ T3987] EXT4-fs error (device loop1): ext4_truncate:4396: inode #16: comm syz.1.1561: mark_inode_dirty error [ 64.471430][ T3987] EXT4-fs error (device loop1) in ext4_orphan_cleanup:3108: error 27 [ 64.479770][ T3987] EXT4-fs (loop1): 1 truncate cleaned up [ 64.485451][ T3987] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh, [ 64.495120][ T3987] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.551699][ T298] blk_update_request: I/O error, dev loop1, sector 9 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 64.558804][ T301] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 64.577704][ T301] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.588747][ T298] blk_update_request: I/O error, dev loop1, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.589695][ T301] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 64.600549][ T298] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 64.616926][ T298] blk_update_request: I/O error, dev loop1, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.619825][ T301] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.631695][ T298] Buffer I/O error on dev loop1p3, logical block 9, async page read [ 64.639322][ T301] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 64.647239][ T298] Buffer I/O error on dev loop1p3, logical block 10, async page read [ 64.655425][ T301] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 64.663648][ T298] Buffer I/O error on dev loop1p3, logical block 11, async page read [ 64.672020][ T301] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 64.723561][ T5] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 64.782702][ T4009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1573'. [ 64.964863][ T4015] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.985120][ T4011] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 64.991596][ T4011] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 65.001113][ T4015] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,debug_want_extra_isize=0x0000000000000080,init_itable=0x00000000000000ff,resuid=0x0000000000000000,grpid,nojournal_checksum,noauto_da_alloc,bsddf,dioread_nolock,,errors=continue [ 65.025826][ T4011] F2FS-fs (loop1): invalid crc value [ 65.039070][ T4011] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 65.066739][ T4011] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 65.074057][ T4011] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 65.103571][ T5] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.114270][ T5] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.135309][ T275] attempt to access beyond end of device [ 65.135309][ T275] loop1: rw=2049, want=45104, limit=40427 [ 65.193613][ T5] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 65.202837][ T5] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 65.211254][ T5] usb 8-1: SerialNumber: syz [ 65.248704][ T4031] EXT4-fs (loop4): Test dummy encryption mode enabled [ 65.262699][ T4031] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 65.276785][ T4031] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,data_err=ignore,resuid=0x0000000000000000,inlinecrypt,dioread_nolock,bsddf,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 65.306737][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 65.306748][ T24] audit: type=1400 audit(2000000041.139:473): avc: denied { rename } for pid=4030 comm="syz.4.1580" name="#5" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.307237][ T4037] netlink: 'syz.1.1582': attribute type 6 has an invalid length. [ 65.312861][ T24] audit: type=1400 audit(2000000041.139:474): avc: denied { unlink } for pid=4030 comm="syz.4.1580" name="#6" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.367333][ T24] audit: type=1400 audit(2000000041.199:475): avc: denied { unlink } for pid=279 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 65.484104][ T5] usb 8-1: 0:2 : does not exist [ 65.524942][ T5] usb 8-1: USB disconnect, device number 4 [ 65.744284][ T301] udevd[301]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.202797][ T4081] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x6f4cd389, utbl_chksum : 0xe619d30d) [ 66.268414][ T4073] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 66.276245][ T4081] attempt to access beyond end of device [ 66.276245][ T4081] loop7: rw=0, want=65784, limit=256 [ 66.289035][ T4073] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 66.305929][ T4073] F2FS-fs (loop3): invalid crc value [ 66.312677][ T4073] F2FS-fs (loop3): Found nat_bits in checkpoint [ 66.361109][ T4073] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 66.368257][ T4073] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 66.395037][ T24] audit: type=1400 audit(2000000042.229:476): avc: denied { append } for pid=4072 comm="syz.3.1598" path="/289/file0/memory.stat" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 66.418529][ T24] audit: type=1400 audit(2000000042.229:477): avc: denied { ioctl } for pid=4072 comm="syz.3.1598" path="/289/file0/memory.stat" dev="loop3" ino=10 ioctlcmd=0x6686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 66.567578][ T4099] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.620015][ T24] audit: type=1400 audit(2000000042.449:478): avc: denied { mount } for pid=4098 comm="syz.7.1610" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 66.676260][ T24] audit: type=1400 audit(2000000042.499:479): avc: denied { unmount } for pid=3092 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 66.794999][ T4112] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,norecovery,,errors=continue [ 66.805778][ T4112] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.836359][ T4112] EXT4-fs error (device loop7): ext4_xattr_block_get:546: inode #15: comm syz.7.1615: corrupted xattr block 33 [ 66.837512][ T4115] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,noauto_da_alloc,,errors=continue [ 66.848425][ T4112] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 66.859907][ T4115] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.868995][ T4112] EXT4-fs error (device loop7): ext4_xattr_block_get:546: inode #15: comm syz.7.1615: corrupted xattr block 33 [ 66.892136][ T4112] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 66.901133][ T4112] EXT4-fs error (device loop7): ext4_xattr_block_get:546: inode #15: comm syz.7.1615: corrupted xattr block 33 [ 66.913048][ T4112] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 66.922161][ T4112] EXT4-fs error (device loop7): ext4_xattr_block_get:546: inode #15: comm syz.7.1615: corrupted xattr block 33 [ 66.934565][ T4102] F2FS-fs (loop1): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 66.943199][ T4102] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 66.944032][ T4112] fscrypt (loop7, inode 15): Error -117 getting encryption context [ 66.952667][ T4102] F2FS-fs (loop1): invalid crc value [ 66.974961][ T4115] SELinux: Context system_u:object_r:fsadm_ex is not valid (left unmapped). [ 66.986462][ T24] audit: type=1400 audit(2000000042.819:480): avc: denied { relabelto } for pid=4113 comm="syz.3.1614" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 67.012976][ T4115] EXT4-fs error (device loop3): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 67.028766][ T4102] F2FS-fs (loop1): Found nat_bits in checkpoint [ 67.061634][ T4102] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 67.068828][ T4102] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 67.222952][ T24] audit: type=1400 audit(2000000043.049:481): avc: denied { connect } for pid=4158 comm="syz.7.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.296064][ T4154] EXT4-fs (loop6): Ignoring removed oldalloc option [ 67.318644][ T4168] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.332073][ T4154] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 67.343028][ T4154] EXT4-fs (loop6): 1 truncate cleaned up [ 67.349212][ T4154] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue [ 67.534178][ T4182] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota, [ 67.641656][ T4197] EXT4-fs (loop4): Ignoring removed orlov option [ 67.653580][ T25] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 67.693149][ T4197] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 67.975133][ T4211] FAT-fs (loop4): Directory bread(block 64) failed [ 67.991996][ T4211] FAT-fs (loop4): Directory bread(block 65) failed [ 67.998686][ T4211] FAT-fs (loop4): Directory bread(block 66) failed [ 68.005351][ T4211] FAT-fs (loop4): Directory bread(block 67) failed [ 68.011955][ T4211] FAT-fs (loop4): Directory bread(block 68) failed [ 68.018906][ T4211] FAT-fs (loop4): Directory bread(block 69) failed [ 68.025585][ T4211] FAT-fs (loop4): Directory bread(block 70) failed [ 68.032940][ T4211] FAT-fs (loop4): Directory bread(block 71) failed [ 68.039871][ T4211] FAT-fs (loop4): Directory bread(block 72) failed [ 68.046582][ T4211] FAT-fs (loop4): Directory bread(block 73) failed [ 68.063568][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.080461][ T25] usb 4-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 68.095366][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.107320][ T25] usb 4-1: config 0 descriptor?? [ 68.253522][ T1568] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 68.349711][ T4229] device dummy0 entered promiscuous mode [ 68.357016][ T4228] device dummy0 left promiscuous mode [ 68.362849][ T4226] FAT-fs (loop4): Directory bread(block 64) failed [ 68.369592][ T4226] FAT-fs (loop4): Directory bread(block 65) failed [ 68.376540][ T4226] FAT-fs (loop4): Directory bread(block 66) failed [ 68.383758][ T4226] FAT-fs (loop4): Directory bread(block 67) failed [ 68.390399][ T4226] FAT-fs (loop4): Directory bread(block 68) failed [ 68.397624][ T4226] FAT-fs (loop4): Directory bread(block 69) failed [ 68.404943][ T4226] FAT-fs (loop4): Directory bread(block 70) failed [ 68.415895][ T4226] FAT-fs (loop4): Directory bread(block 71) failed [ 68.422565][ T4226] FAT-fs (loop4): Directory bread(block 72) failed [ 68.429509][ T4226] FAT-fs (loop4): Directory bread(block 73) failed [ 68.455787][ T24] audit: type=1400 audit(2000000044.289:482): avc: denied { write } for pid=4234 comm="syz.6.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 68.503528][ T1568] usb 2-1: Using ep0 maxpacket: 8 [ 68.556770][ T4250] xt_hashlimit: size too large, truncated to 1048576 [ 68.616531][ T2992] kernel write not supported for file bpf-prog (pid: 2992 comm: kworker/1:6) [ 68.625544][ T1568] usb 2-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.646871][ T1568] usb 2-1: config 0 interface 0 has no altsetting 0 [ 68.653870][ T1568] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 68.663197][ T1568] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.671283][ T4257] tipc: Started in network mode [ 68.676507][ T4257] tipc: Own node identity 5, cluster identity 9 [ 68.682740][ T4257] tipc: 32-bit node address hash set to 5 [ 68.689426][ T1568] usb 2-1: config 0 descriptor?? [ 68.693627][ T4257] tipc: Cannot configure node identity twice [ 68.729572][ T4261] usb usb5: usbfs: process 4261 (syz.6.1673) did not claim interface 0 before use [ 68.813705][ T25] usb 4-1: string descriptor 0 read error: -71 [ 68.833572][ T25] uclogic 0003:5543:3031.0016: failed retrieving string descriptor #200: -71 [ 68.842410][ T25] uclogic 0003:5543:3031.0016: failed retrieving pen parameters: -71 [ 68.850686][ T25] uclogic 0003:5543:3031.0016: failed probing pen v2 parameters: -71 [ 68.858943][ T25] uclogic 0003:5543:3031.0016: failed probing parameters: -71 [ 68.866521][ T25] uclogic: probe of 0003:5543:3031.0016 failed with error -71 [ 68.875506][ T25] usb 4-1: USB disconnect, device number 11 [ 69.174470][ T1568] logitech-hidpp-device 0003:046D:C086.0017: unbalanced collection at end of report description [ 69.185181][ T1568] logitech-hidpp-device 0003:046D:C086.0017: hidpp_probe:parse failed [ 69.193395][ T1568] logitech-hidpp-device: probe of 0003:046D:C086.0017 failed with error -22 [ 69.384131][ T5] usb 2-1: USB disconnect, device number 11 [ 69.462838][ T4278] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 69.474500][ T4278] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.481757][ T4278] EXT4-fs error (device loop3): ext4_map_blocks:740: inode #3: block 3: comm syz.3.1680: lblock 3 mapped to illegal pblock 3 (length 1) [ 69.495911][ T4278] EXT4-fs error (device loop3): ext4_acquire_dquot:6225: comm syz.3.1680: Failed to acquire dquot type 0 [ 69.507420][ T4278] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #3: block 3: comm syz.3.1680: lblock 3 mapped to illegal pblock 3 (length 1) [ 69.521622][ T4278] EXT4-fs error (device loop3): ext4_acquire_dquot:6225: comm syz.3.1680: Failed to acquire dquot type 0 [ 69.533068][ T4278] EXT4-fs error (device loop3): ext4_free_blocks:5701: comm syz.3.1680: Freeing blocks not in datazone - block = 0, count = 4096 [ 69.546838][ T4278] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #3: block 3: comm syz.3.1680: lblock 3 mapped to illegal pblock 3 (length 1) [ 69.579237][ T4278] EXT4-fs error (device loop3): ext4_acquire_dquot:6225: comm syz.3.1680: Failed to acquire dquot type 0 [ 69.601406][ T4278] EXT4-fs (loop3): 1 orphan inode deleted [ 69.608129][ T4278] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 69.625297][ T4278] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz.3.1680: path /305/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 69.799040][ T4268] F2FS-fs (loop6): invalid crc value [ 69.818109][ T4268] F2FS-fs (loop6): Found nat_bits in checkpoint [ 69.857223][ T4308] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1692'. [ 69.858129][ T4268] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 69.875864][ T4268] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 69.909079][ T4313] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 69.919832][ T298] print_req_error: 292 callbacks suppressed [ 69.919845][ T298] blk_update_request: I/O error, dev loop1, sector 9 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 69.920138][ T301] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 69.927603][ T298] blk_update_request: I/O error, dev loop1, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.966242][ T298] buffer_io_error: 252 callbacks suppressed [ 69.966252][ T298] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 69.974816][ T301] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 69.981417][ T298] blk_update_request: I/O error, dev loop1, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.003135][ T298] Buffer I/O error on dev loop1p3, logical block 9, async page read [ 70.011767][ T301] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 70.015825][ T298] blk_update_request: I/O error, dev loop1, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.023204][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 70.032647][ T298] Buffer I/O error on dev loop1p3, logical block 10, async page read [ 70.046707][ T298] blk_update_request: I/O error, dev loop1, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.058556][ T301] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.058644][ T298] Buffer I/O error on dev loop1p3, logical block 11, async page read [ 70.078254][ T298] blk_update_request: I/O error, dev loop1, sector 13 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.083404][ T301] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 70.089214][ T298] Buffer I/O error on dev loop1p3, logical block 12, async page read [ 70.089264][ T298] blk_update_request: I/O error, dev loop1, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.116569][ T298] Buffer I/O error on dev loop1p3, logical block 13, async page read [ 70.124977][ T298] Buffer I/O error on dev loop1p3, logical block 14, async page read [ 70.133090][ T298] Buffer I/O error on dev loop1p3, logical block 15, async page read [ 70.303512][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 70.378137][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 70.378149][ T24] audit: type=1400 audit(2000000046.209:485): avc: denied { read write } for pid=4349 comm="syz.3.1713" name="loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 70.443602][ T25] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 70.451146][ T24] audit: type=1400 audit(2000000046.209:486): avc: denied { open } for pid=4349 comm="syz.3.1713" path="/dev/loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 70.451896][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.527110][ T25] usb 5-1: config 0 has no interface number 0 [ 70.535186][ T24] audit: type=1400 audit(2000000046.209:487): avc: denied { ioctl } for pid=4349 comm="syz.3.1713" path="/dev/loop-control" dev="devtmpfs" ino=114 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 70.537219][ T25] usb 5-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 70.604438][ T4370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 70.623414][ T4370] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1722'. [ 70.733591][ T25] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 70.742927][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.751149][ T25] usb 5-1: Product: syz [ 70.755488][ T25] usb 5-1: Manufacturer: syz [ 70.760130][ T25] usb 5-1: SerialNumber: syz [ 70.768612][ T25] usb 5-1: config 0 descriptor?? [ 70.836310][ T4336] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 70.845740][ T4336] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 70.854608][ T4336] F2FS-fs (loop1): Test dummy encryption mode enabled [ 70.866412][ T4336] F2FS-fs (loop1): invalid crc value [ 70.876939][ T4336] F2FS-fs (loop1): Found nat_bits in checkpoint [ 70.917832][ T4336] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 70.925056][ T1568] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 70.927868][ T4336] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 71.139685][ T4412] binder: 4411:4412 ioctl c0306201 200000000480 returned -22 [ 71.173520][ T1568] usb 4-1: Using ep0 maxpacket: 8 [ 71.298503][ T1568] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.320539][ T25] usb 5-1: USB disconnect, device number 10 [ 71.336673][ T1568] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.356414][ T1568] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.369859][ T1568] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 71.385776][ T1568] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.410474][ T1568] usb 4-1: config 0 descriptor?? [ 71.505901][ T24] audit: type=1326 audit(2000000047.339:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4450 comm="syz.6.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1681e69cb9 code=0x7ffc0000 [ 71.537822][ T24] audit: type=1326 audit(2000000047.339:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4450 comm="syz.6.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1681e69cb9 code=0x7ffc0000 [ 71.565948][ T24] audit: type=1326 audit(2000000047.369:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4450 comm="syz.6.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1681e69cb9 code=0x7ffc0000 [ 71.591821][ T24] audit: type=1326 audit(2000000047.369:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4450 comm="syz.6.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1681e69cb9 code=0x7ffc0000 [ 71.617972][ T24] audit: type=1326 audit(2000000047.369:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4450 comm="syz.6.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1681e69cb9 code=0x7ffc0000 [ 71.642221][ T24] audit: type=1326 audit(2000000047.369:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4450 comm="syz.6.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f1681e69cb9 code=0x7ffc0000 [ 71.666702][ T24] audit: type=1326 audit(2000000047.369:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4450 comm="syz.6.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1681e69cb9 code=0x7ffc0000 [ 71.703827][ T4457] FAT-fs (loop7): Directory bread(block 64) failed [ 71.710344][ T4457] FAT-fs (loop7): Directory bread(block 65) failed [ 71.717033][ T4457] FAT-fs (loop7): Directory bread(block 66) failed [ 71.723730][ T4457] FAT-fs (loop7): Directory bread(block 67) failed [ 71.730425][ T4457] FAT-fs (loop7): Directory bread(block 68) failed [ 71.737045][ T4457] FAT-fs (loop7): Directory bread(block 69) failed [ 71.743837][ T4457] FAT-fs (loop7): Directory bread(block 70) failed [ 71.750614][ T4457] FAT-fs (loop7): Directory bread(block 71) failed [ 71.757342][ T4457] FAT-fs (loop7): Directory bread(block 72) failed [ 71.763903][ T4457] FAT-fs (loop7): Directory bread(block 73) failed [ 71.784946][ T4457] attempt to access beyond end of device [ 71.784946][ T4457] loop7: rw=524288, want=1196, limit=256 [ 71.796270][ T4457] attempt to access beyond end of device [ 71.796270][ T4457] loop7: rw=0, want=1196, limit=256 [ 71.894274][ T1568] kye 0003:0458:4018.0018: unbalanced delimiter at end of report description [ 71.911769][ T1568] kye 0003:0458:4018.0018: parse failed [ 71.923550][ T1568] kye: probe of 0003:0458:4018.0018 failed with error -22 [ 72.088134][ T4487] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 72.100695][ T5] usb 4-1: USB disconnect, device number 12 [ 72.117217][ T4487] exFAT-fs (loop4): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442) [ 72.117217][ T4487] [ 72.139133][ T4487] exFAT-fs (loop4): Filesystem has been set read-only [ 72.146119][ T4487] exFAT-fs (loop4): error, failed to bmap (inode : ffff88811b71fa90 iblock : 0, err : -5) [ 72.351127][ T4496] EXT4-fs error (device loop4): ext4_orphan_get:1421: comm syz.4.1780: bad orphan inode 16 [ 72.368769][ T4496] ext4_test_bit(bit=15, block=18) = 0 [ 72.386652][ T4496] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 72.395955][ T4496] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.612566][ T4492] F2FS-fs (loop7): Found nat_bits in checkpoint [ 72.669662][ T4492] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 72.690828][ T4532] erofs: (device loop4): mounted with root inode @ nid 36. [ 72.750170][ T4526] erofs: (device loop4): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 73.003524][ T1568] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 73.085153][ T4569] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.105127][ T4569] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 73.115950][ T4569] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.1811: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 73.137505][ T4569] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 12: comm syz.4.1811: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 73.158592][ T4569] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz.4.1811: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 73.180528][ T4569] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 14: comm syz.4.1811: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 73.201092][ T4569] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 15: comm syz.4.1811: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 73.221869][ T4569] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz.4.1811: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 73.243355][ T4569] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 17: comm syz.4.1811: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 73.263976][ T4569] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #2: block 18: comm syz.4.1811: lblock 23 mapped to illegal pblock 18 (length 1) [ 73.279164][ T4569] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 19: comm syz.4.1811: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 73.300105][ T4569] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 20: comm syz.4.1811: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 73.403534][ T1568] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 73.431061][ T1568] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 73.445251][ T1568] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.623589][ T1568] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 73.632756][ T1568] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.641154][ T1568] usb 4-1: Product: syz [ 73.645505][ T1568] usb 4-1: Manufacturer: syz [ 73.650117][ T1568] usb 4-1: SerialNumber: syz [ 73.694178][ T1568] hub 4-1:1.0: bad descriptor, ignoring hub [ 73.700280][ T1568] hub: probe of 4-1:1.0 failed with error -5 [ 73.708524][ T4594] EXT4-fs (loop1): Ignoring removed nobh option [ 73.721074][ T4592] loop7: p1 p2 p4[EZD] [ 73.725935][ T4592] loop7: p1 start 589823 is beyond EOD, truncated [ 73.732658][ T4594] EXT4-fs (loop1): Test dummy encryption mode enabled [ 73.733534][ T4592] loop7: p2 size 4294924146 extends beyond EOD, truncated [ 73.747576][ T4592] loop7: p4 size 262912 extends beyond EOD, truncated [ 73.755667][ T4594] EXT4-fs error (device loop1): __ext4_iget:5022: inode #11: block 1: comm syz.1.1820: invalid block [ 73.774694][ T4594] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.1820: couldn't read orphan inode 11 (err -117) [ 73.797084][ T4594] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,debug_want_extra_isize=0x0000000000000004,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 73.862428][ T279] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 73.876890][ T3092] __loop_clr_fd: partition scan of loop7 failed (rc=-16) [ 73.924496][ T1568] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 74.001297][ T4605] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 74.011420][ T4605] EXT4-fs (loop1): 1 truncate cleaned up [ 74.017202][ T4605] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,noload,data_err=abort,noload,data_err=ignore,auto_da_alloc,,errors=continue [ 74.057720][ T4599] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 74.075769][ T4599] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 74.099845][ T4599] F2FS-fs (loop7): invalid crc value [ 74.115886][ T4599] F2FS-fs (loop7): Found nat_bits in checkpoint [ 74.140979][ T4599] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 74.148491][ T4599] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 74.162129][ T4623] tipc: Enabling of bearer rejected, failed to enable media [ 74.192847][ T4626] FAT-fs (loop4): Directory bread(block 64) failed [ 74.199559][ T4626] FAT-fs (loop4): Directory bread(block 65) failed [ 74.206969][ T4626] FAT-fs (loop4): Directory bread(block 66) failed [ 74.213891][ T4626] FAT-fs (loop4): Directory bread(block 67) failed [ 74.220518][ T4626] FAT-fs (loop4): Directory bread(block 68) failed [ 74.227214][ T4626] FAT-fs (loop4): Directory bread(block 69) failed [ 74.234196][ T4626] FAT-fs (loop4): Directory bread(block 70) failed [ 74.240954][ T4626] FAT-fs (loop4): Directory bread(block 71) failed [ 74.247739][ T4626] FAT-fs (loop4): Directory bread(block 72) failed [ 74.254322][ T4626] FAT-fs (loop4): Directory bread(block 73) failed [ 74.273662][ T1568] usb 4-1: USB disconnect, device number 13 [ 74.281024][ T1568] usblp0: removed [ 74.318766][ T4626] attempt to access beyond end of device [ 74.318766][ T4626] loop4: rw=0, want=1196, limit=256 [ 74.474293][ T4650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1841'. [ 74.544692][ T4658] FAT-fs (loop7): Directory bread(block 64) failed [ 74.563589][ T4658] FAT-fs (loop7): Directory bread(block 65) failed [ 74.588328][ T4658] FAT-fs (loop7): Directory bread(block 66) failed [ 74.601957][ T4669] xt_hashlimit: size too large, truncated to 1048576 [ 74.605748][ T4658] FAT-fs (loop7): Directory bread(block 67) failed [ 74.630373][ T4658] FAT-fs (loop7): Directory bread(block 68) failed [ 74.630388][ T4658] FAT-fs (loop7): Directory bread(block 69) failed [ 74.630413][ T4658] FAT-fs (loop7): Directory bread(block 70) failed [ 74.651919][ T4658] FAT-fs (loop7): Directory bread(block 71) failed [ 74.658977][ T4658] FAT-fs (loop7): Directory bread(block 72) failed [ 74.658991][ T4658] FAT-fs (loop7): Directory bread(block 73) failed [ 74.859671][ T4679] EXT4-fs (loop6): Test dummy encryption mode enabled [ 74.894057][ T4679] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 74.927992][ T4679] System zones: 0-5 [ 74.936951][ T4679] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,inlinecrypt,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 75.213742][ T4692] IPv6: NLM_F_CREATE should be specified when creating new route [ 75.305342][ T301] print_req_error: 646 callbacks suppressed [ 75.305356][ T301] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 75.312437][ T298] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 75.363622][ T301] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.375297][ T301] buffer_io_error: 559 callbacks suppressed [ 75.375306][ T301] Buffer I/O error on dev loop7p2, logical block 1008, async page read [ 75.393624][ T4681] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 75.400335][ T4681] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 75.409650][ T298] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.421494][ T298] Buffer I/O error on dev loop7p4, logical block 1008, async page read [ 75.436942][ T4681] F2FS-fs (loop3): invalid crc value [ 75.442591][ T468] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 75.465553][ T298] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 75.482853][ T468] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.526236][ T4716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4716 comm=syz.6.1868 [ 75.527815][ T298] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.539696][ T4681] F2FS-fs (loop3): Found nat_bits in checkpoint [ 75.554556][ T468] Buffer I/O error on dev loop7p4, logical block 1008, async page read [ 75.567741][ T303] blk_update_request: I/O error, dev loop1, sector 9 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 75.580496][ T301] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 75.601856][ T298] Buffer I/O error on dev loop7p2, logical block 1008, async page read [ 75.613060][ T303] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 75.614105][ T4716] netlink: 'syz.6.1868': attribute type 13 has an invalid length. [ 75.621500][ T301] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 75.642944][ T303] Buffer I/O error on dev loop1p3, logical block 9, async page read [ 75.653545][ T303] Buffer I/O error on dev loop1p3, logical block 10, async page read [ 75.662057][ T303] Buffer I/O error on dev loop1p3, logical block 11, async page read [ 75.670732][ T303] Buffer I/O error on dev loop1p3, logical block 12, async page read [ 75.685635][ T4716] gretap0: refused to change device tx_queue_len [ 75.692418][ T4716] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 75.696193][ T4702] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 75.723740][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 75.723750][ T24] audit: type=1326 audit(2000000051.549:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.7.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df3a4ecb9 code=0x7ffc0000 [ 75.769268][ T4702] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 75.778044][ T4681] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 75.781559][ T24] audit: type=1326 audit(2000000051.559:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.7.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df3a4ecb9 code=0x7ffc0000 [ 75.809291][ T24] audit: type=1326 audit(2000000051.559:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.7.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1df3a4ecb9 code=0x7ffc0000 [ 75.809738][ T4702] F2FS-fs (loop4): invalid crc value [ 75.834050][ T24] audit: type=1326 audit(2000000051.559:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.7.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df3a4ecb9 code=0x7ffc0000 [ 75.851298][ T4681] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 75.865438][ T24] audit: type=1326 audit(2000000051.559:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.7.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df3a4ecb9 code=0x7ffc0000 [ 75.884475][ T4702] F2FS-fs (loop4): Found nat_bits in checkpoint [ 75.893607][ T24] audit: type=1326 audit(2000000051.559:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.7.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1df3a4ecb9 code=0x7ffc0000 [ 75.923044][ T24] audit: type=1326 audit(2000000051.559:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.7.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df3a4ecb9 code=0x7ffc0000 [ 75.928167][ T4702] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 75.946620][ T24] audit: type=1326 audit(2000000051.559:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.7.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1df3a4ecb9 code=0x7ffc0000 [ 75.954180][ T4702] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 75.995937][ T4728] FAT-fs (loop6): Directory bread(block 64) failed [ 76.002780][ T4728] FAT-fs (loop6): Directory bread(block 65) failed [ 76.019770][ T24] audit: type=1400 audit(2000000051.709:534): avc: denied { view } for pid=4730 comm="syz.1.1874" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 76.060669][ T4728] FAT-fs (loop6): Directory bread(block 66) failed [ 76.078770][ T4728] FAT-fs (loop6): Directory bread(block 67) failed [ 76.086183][ T4728] FAT-fs (loop6): Directory bread(block 68) failed [ 76.093515][ T4728] FAT-fs (loop6): Directory bread(block 69) failed [ 76.100566][ T4728] FAT-fs (loop6): Directory bread(block 70) failed [ 76.107258][ T4728] FAT-fs (loop6): Directory bread(block 71) failed [ 76.114367][ T4728] FAT-fs (loop6): Directory bread(block 72) failed [ 76.121157][ T4728] FAT-fs (loop6): Directory bread(block 73) failed [ 76.145810][ T4743] EXT4-fs (loop7): Ignoring removed nobh option [ 76.196332][ T4743] EXT4-fs error (device loop7) in ext4_do_update_inode:5350: error 27 [ 76.220537][ T4743] EXT4-fs (loop7): Remounting filesystem read-only [ 76.235326][ T4746] erofs: (device loop1): mounted with root inode @ nid 36. [ 76.263828][ T4743] EXT4-fs error (device loop7): ext4_dirty_inode:6157: inode #16: comm syz.7.1879: mark_inode_dirty error [ 76.293213][ T4743] EXT4-fs error (device loop7) in ext4_do_update_inode:5350: error 27 [ 76.302160][ T4743] EXT4-fs error (device loop7): __ext4_ext_dirty:182: inode #16: comm syz.7.1879: mark_inode_dirty error [ 76.313714][ T4743] EXT4-fs error (device loop7) in ext4_do_update_inode:5350: error 27 [ 76.322257][ T4743] EXT4-fs error (device loop7) in ext4_orphan_del:3292: error 27 [ 76.330466][ T4743] EXT4-fs error (device loop7) in ext4_do_update_inode:5350: error 27 [ 76.338854][ T4743] EXT4-fs error (device loop7): ext4_truncate:4396: inode #16: comm syz.7.1879: mark_inode_dirty error [ 76.351120][ T4743] EXT4-fs error (device loop7) in ext4_orphan_cleanup:3108: error 27 [ 76.358901][ T4739] erofs: (device loop1): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 76.362834][ T4743] EXT4-fs (loop7): 1 truncate cleaned up [ 76.373650][ T296] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 76.373882][ T4743] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nobh, [ 76.398091][ T4743] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.432579][ T296] Quota error (device loop7): write_blk: dquota write failed [ 76.440271][ T296] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 76.451302][ T296] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 76.534057][ T4760] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.670055][ T4771] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 76.685652][ T4771] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 76.694494][ T4771] EXT4-fs (loop6): orphan cleanup on readonly fs [ 76.700869][ T4771] EXT4-fs error (device loop6): ext4_orphan_get:1421: comm syz.6.1886: bad orphan inode 267 [ 76.711170][ T4771] EXT4-fs (loop6): Remounting filesystem read-only [ 76.717809][ T4771] EXT4-fs (loop6): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,data=writeback [ 76.736432][ T4768] loop1: p1 p2 p4[EZD] [ 76.740702][ T4768] loop1: p1 start 589823 is beyond EOD, truncated [ 76.747359][ T4768] loop1: p2 size 4294924146 extends beyond EOD, truncated [ 76.763072][ T4768] loop1: p4 size 262912 extends beyond EOD, truncated [ 76.918189][ T4811] incfs: Error accessing: ./file0. [ 76.943575][ T4811] incfs: mount failed -2 [ 76.987080][ T298] udevd[298]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 76.990456][ T301] udevd[301]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 77.008895][ T4827] tipc: Enabling of bearer rejected, failed to enable media [ 77.017378][ T4829] overlayfs: unrecognized mount option "\" or missing value [ 77.155248][ T4833] udevd[4833]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 77.168233][ T301] udevd[301]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 77.230224][ T4852] netlink: 'syz.1.1926': attribute type 298 has an invalid length. [ 77.273520][ T434] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 77.311411][ T4871] erofs: (device loop4): mounted with root inode @ nid 36. [ 77.321228][ T4871] erofs: (device loop4): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 77.403006][ T4881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1939'. [ 77.444792][ T4887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1943'. [ 77.454673][ T4887] tc_dump_action: action bad kind [ 77.502056][ T4895] netlink: 'syz.7.1947': attribute type 2 has an invalid length. [ 77.523502][ T434] usb 4-1: Using ep0 maxpacket: 32 [ 77.535963][ T4897] EXT4-fs (loop7): Ignoring removed orlov option [ 77.586139][ T4901] device bridge0 entered promiscuous mode [ 77.597041][ T4897] EXT4-fs (loop7): mounted filesystem without journal. Opts: nogrpid,init_itable=0x00000000000006e4,nombcache,orlov,dioread_lock,nombcache,,errors=continue [ 77.638854][ T4897] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.653875][ T434] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.668564][ T434] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 77.707504][ T434] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 77.736474][ T434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.748669][ T434] usb 4-1: config 0 descriptor?? [ 77.995813][ T434] usb 4-1: USB disconnect, device number 14 [ 78.003502][ T297] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 78.196735][ T4923] device veth0_to_batadv entered promiscuous mode [ 78.217451][ T4923] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 78.363594][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 78.383634][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.403552][ T297] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 78.412702][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.437294][ T297] usb 5-1: config 0 descriptor?? [ 78.504919][ T4941] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 78.523548][ T4941] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 78.542884][ T4941] F2FS-fs (loop1): invalid crc value [ 78.576775][ T4941] F2FS-fs (loop1): Found nat_bits in checkpoint [ 78.615372][ T4941] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 78.628634][ T4941] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 78.661188][ T4967] xt_hashlimit: size too large, truncated to 1048576 [ 78.870316][ T4976] EXT4-fs (loop1): Test dummy encryption mode enabled [ 78.878392][ T4976] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 78.886999][ T4976] System zones: 0-5 [ 78.891783][ T4976] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,inlinecrypt,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 78.934748][ T297] kye 0003:0458:5013.0019: unknown main item tag 0x0 [ 78.942556][ T297] kye 0003:0458:5013.0019: unknown main item tag 0x0 [ 78.953382][ T297] kye 0003:0458:5013.0019: unknown main item tag 0x0 [ 78.960633][ T297] kye 0003:0458:5013.0019: unknown main item tag 0x0 [ 78.967600][ T297] kye 0003:0458:5013.0019: unknown main item tag 0x0 [ 78.983695][ T297] kye 0003:0458:5013.0019: hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 78.994877][ T297] kye 0003:0458:5013.0019: tablet-enabling feature report not found [ 79.003198][ T297] kye 0003:0458:5013.0019: tablet enabling failed [ 79.139423][ T1568] usb 5-1: USB disconnect, device number 11 [ 79.178551][ T4995] devtmpfs: Too few inodes for current use [ 79.272497][ T5010] EXT4-fs (loop7): Ignoring removed bh option [ 79.304310][ T5010] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,bh,nodioread_nolock,,errors=continue [ 79.332564][ T5010] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.351501][ T4996] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 79.367376][ T4996] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 79.376580][ T4996] F2FS-fs (loop1): invalid crc value [ 79.390595][ T4996] F2FS-fs (loop1): Found nat_bits in checkpoint [ 79.414731][ T4996] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 79.421957][ T4996] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 79.473830][ T54] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 79.601987][ T5030] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 79.613428][ T5030] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.729912][ T5051] netlink: 'syz.7.2011': attribute type 7 has an invalid length. [ 79.780055][ T5057] FAT-fs (loop4): Directory bread(block 32) failed [ 79.789907][ T5057] FAT-fs (loop4): Directory bread(block 33) failed [ 79.796935][ T5057] FAT-fs (loop4): Directory bread(block 34) failed [ 79.811803][ T5057] FAT-fs (loop4): Directory bread(block 35) failed [ 79.818596][ T5057] FAT-fs (loop4): Directory bread(block 36) failed [ 79.825457][ T5057] FAT-fs (loop4): Directory bread(block 37) failed [ 79.832234][ T5057] FAT-fs (loop4): Directory bread(block 38) failed [ 79.839022][ T54] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.849614][ T5057] FAT-fs (loop4): Directory bread(block 39) failed [ 79.856489][ T54] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.865815][ T5057] FAT-fs (loop4): Directory bread(block 40) failed [ 79.872346][ T5057] FAT-fs (loop4): Directory bread(block 41) failed [ 79.918789][ T5057] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 79.927481][ T5057] FAT-fs (loop4): Filesystem has been set read-only [ 79.953654][ T54] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 79.962973][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 79.989371][ T54] usb 4-1: SerialNumber: syz [ 80.027480][ T5082] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 80.043585][ T1568] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 80.062704][ T5082] exFAT-fs (loop7): hint_cluster is invalid (17) [ 80.150257][ T5096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2033'. [ 80.159401][ T5096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2033'. [ 80.264308][ T54] usb 4-1: 0:2 : does not exist [ 80.269261][ T54] usb 4-1: unit 5: unexpected type 0x03 [ 80.279421][ T54] usb 4-1: USB disconnect, device number 15 [ 80.315114][ T4833] print_req_error: 263 callbacks suppressed [ 80.315126][ T4833] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 80.333704][ T4833] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.352943][ T298] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 80.353224][ T4833] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 80.369900][ T298] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.378052][ T4833] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.391449][ T298] buffer_io_error: 149 callbacks suppressed [ 80.391460][ T298] Buffer I/O error on dev loop7p4, logical block 1008, async page read [ 80.398825][ T4833] Buffer I/O error on dev loop7p2, logical block 1008, async page read [ 80.423595][ T1568] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.424534][ T4833] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 80.436473][ T298] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 80.446226][ T4833] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.457764][ T434] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 80.457808][ T1568] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.469673][ T4833] Buffer I/O error on dev loop7p2, logical block 1008, async page read [ 80.476950][ T298] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 80.503995][ T301] udevd[301]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.506192][ T1568] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 80.526431][ T298] Buffer I/O error on dev loop7p4, logical block 1008, async page read [ 80.530988][ T1568] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.543790][ T4833] Buffer I/O error on dev loop7p4, logical block 1008, async page read [ 80.548818][ T301] Buffer I/O error on dev loop7p2, logical block 1008, async page read [ 80.564178][ T1568] usb 2-1: config 0 descriptor?? [ 80.569166][ T298] Buffer I/O error on dev loop7p4, logical block 1008, async page read [ 80.570476][ T301] Buffer I/O error on dev loop7p2, logical block 1008, async page read [ 80.806713][ T24] kauditd_printk_skb: 25 callbacks suppressed [ 80.806725][ T24] audit: type=1326 audit(2000000056.639:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4852d5acb9 code=0x7ffc0000 [ 80.836473][ T434] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.837483][ T24] audit: type=1326 audit(2000000056.639:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4852d5acb9 code=0x7ffc0000 [ 80.843073][ T434] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 80.876248][ T24] audit: type=1326 audit(2000000056.639:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4852d5acb9 code=0x7ffc0000 [ 80.877440][ T434] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.902396][ T24] audit: type=1326 audit(2000000056.639:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4852d5acb9 code=0x7ffc0000 [ 80.909830][ T434] usb 5-1: config 0 descriptor?? [ 80.931621][ T24] audit: type=1326 audit(2000000056.639:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4852d5acb9 code=0x7ffc0000 [ 80.963973][ T24] audit: type=1326 audit(2000000056.639:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f4852d5acb9 code=0x7ffc0000 [ 80.987546][ T24] audit: type=1326 audit(2000000056.639:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4852d5acb9 code=0x7ffc0000 [ 81.013252][ T24] audit: type=1326 audit(2000000056.639:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.3.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4852d5acb9 code=0x7ffc0000 [ 81.037059][ T24] audit: type=1326 audit(2000000056.799:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5129 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4852d5acb9 code=0x7ffc0000 [ 81.054566][ T1568] kye 0003:0458:5019.001A: item fetching failed at offset 4/5 [ 81.064986][ T24] audit: type=1326 audit(2000000056.799:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5129 comm="syz.3.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4852d5acb9 code=0x7ffc0000 [ 81.069692][ T1568] kye 0003:0458:5019.001A: parse failed [ 81.097446][ T1568] kye: probe of 0003:0458:5019.001A failed with error -22 [ 81.278153][ T54] usb 2-1: USB disconnect, device number 12 [ 81.434221][ T434] koneplus 0003:1E7D:2E22.001B: unknown main item tag 0x0 [ 81.441518][ T434] koneplus 0003:1E7D:2E22.001B: unknown main item tag 0x0 [ 81.448688][ T434] koneplus 0003:1E7D:2E22.001B: unknown main item tag 0x0 [ 81.455940][ T434] koneplus 0003:1E7D:2E22.001B: unknown main item tag 0x0 [ 81.463104][ T434] koneplus 0003:1E7D:2E22.001B: unknown main item tag 0x0 [ 81.470805][ T434] koneplus 0003:1E7D:2E22.001B: hidraw0: USB HID v1.01 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 81.640494][ T54] usb 5-1: USB disconnect, device number 12 [ 81.991451][ T5177] EXT4-fs (loop3): Ignoring removed orlov option [ 81.998599][ T5177] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 82.016141][ T5177] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 82.042252][ T5177] tmpfs: Cannot retroactively limit inodes [ 82.059691][ T5192] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2077'. [ 82.068789][ T5192] tipc: Invalid UDP bearer configuration [ 82.068808][ T5192] tipc: Enabling of bearer rejected, failed to enable media [ 82.206945][ T5213] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2088'. [ 82.269814][ T5221] EXT4-fs (loop1): Test dummy encryption mode enabled [ 82.277282][ T5221] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.298240][ T5221] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,data_err=ignore,resuid=0x0000000000000000,inlinecrypt,dioread_nolock,bsddf,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 82.341097][ T5221] ------------[ cut here ]------------ [ 82.351325][ T5221] WARNING: CPU: 0 PID: 5221 at mm/page_alloc.c:5354 __alloc_pages_nodemask+0x345/0x620 [ 82.362128][ T5221] Modules linked in: [ 82.366273][ T5221] CPU: 0 PID: 5221 Comm: syz.1.2090 Tainted: G W syzkaller #0 [ 82.375818][ T5221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.386220][ T5221] RIP: 0010:__alloc_pages_nodemask+0x345/0x620 [ 82.393627][ T5221] Code: 48 3b 8c 24 e0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 41 f7 c6 00 20 00 00 0f 85 d8 fd ff ff <0f> 0b 31 c0 eb 95 31 c0 e9 a6 fd ff ff 4c 89 ff e8 46 7b f5 ff 49 [ 82.413600][ T5221] RSP: 0018:ffffc90000eb78e0 EFLAGS: 00010246 [ 82.425148][ T5221] RAX: ffffc90000eb7970 RBX: 0000000000000000 RCX: 0000000000000000 [ 82.440467][ T5221] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc90000eb7988 [ 82.454014][ T5221] RBP: ffffc90000eb7a10 R08: ffffc90000eb7987 R09: ffffc90000eb7970 [ 82.462160][ T5221] R10: dffffc0000000000 R11: fffff520001d6f31 R12: 1ffff920001d6f24 [ 82.470729][ T5221] R13: dffffc0000000000 R14: 0000000000040d40 R15: 000000000000000f [ 82.471370][ T5238] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2098'. [ 82.479012][ T5221] FS: 00007fcf954986c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 82.479029][ T5221] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.504239][ T5221] CR2: 00007f92f7e49ff8 CR3: 00000001170ce000 CR4: 00000000003506b0 [ 82.512223][ T5221] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.520314][ T5221] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.528372][ T5221] Call Trace: [ 82.531858][ T5221] ? legacy_get_tree+0xed/0x190 [ 82.536762][ T5221] ? vfs_get_tree+0x89/0x260 [ 82.546839][ T5221] ? do_new_mount+0x25a/0xa20 [ 82.551553][ T5221] ? path_mount+0x585/0xc90 [ 82.557465][ T5221] ? __se_sys_mount+0x320/0x390 [ 82.563130][ T5221] ? __x64_sys_mount+0xbf/0xd0 [ 82.568086][ T5221] ? do_syscall_64+0x31/0x40 [ 82.572689][ T5221] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 82.587430][ T5221] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 82.594576][ T5221] kmalloc_order+0x4c/0x160 [ 82.599165][ T5221] kmalloc_order_trace+0x16/0x80 [ 82.604192][ T5221] __kmalloc+0x1eb/0x330 [ 82.608436][ T5221] incfs_realloc_mount_info+0x99/0x440 [ 82.614011][ T5221] incfs_alloc_mount_info+0x476/0x540 [ 82.619455][ T5221] incfs_mount_fs+0x3c6/0x8d0 [ 82.624209][ T5221] ? incfs_unlink+0x80/0x80 [ 82.628809][ T5221] ? selinux_sb_eat_lsm_opts+0xa72/0xbf0 [ 82.634758][ T5221] legacy_get_tree+0xed/0x190 [ 82.639440][ T5221] ? incfs_unlink+0x80/0x80 [ 82.644179][ T5221] vfs_get_tree+0x89/0x260 [ 82.648791][ T5221] do_new_mount+0x25a/0xa20 [ 82.653488][ T5221] path_mount+0x585/0xc90 [ 82.657824][ T5221] __se_sys_mount+0x320/0x390 [ 82.662637][ T5221] ? __x64_sys_mount+0xd0/0xd0 [ 82.667652][ T5221] ? mntput+0x5f/0xc0 [ 82.671779][ T5221] __x64_sys_mount+0xbf/0xd0 [ 82.676661][ T5221] do_syscall_64+0x31/0x40 [ 82.681173][ T5221] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 82.687549][ T5221] RIP: 0033:0x7fcf96a3bcb9 [ 82.692045][ T5221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.712049][ T5221] RSP: 002b:00007fcf95498028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 82.720715][ T5221] RAX: ffffffffffffffda RBX: 00007fcf96cb6fa0 RCX: 00007fcf96a3bcb9 [ 82.728960][ T5221] RDX: 0000200000000500 RSI: 0000200000000040 RDI: 0000200000000000 [ 82.737101][ T5221] RBP: 00007fcf96aa9bf7 R08: 00002000000001c0 R09: 0000000000000000 [ 82.745348][ T5221] R10: 000000000000c802 R11: 0000000000000246 R12: 0000000000000000 [ 82.753747][ T5221] R13: 00007fcf96cb7038 R14: 00007fcf96cb6fa0 R15: 00007ffe208aab08 [ 82.761901][ T5221] ---[ end trace da0f11f37706709b ]--- [ 82.768022][ T5221] incfs: Error allocating mount info. -12 [ 82.774463][ T5221] incfs: mount failed -12 [ 83.314336][ T5264] netlink: 'syz.1.2110': attribute type 21 has an invalid length. [ 83.429618][ T301] Buffer I/O error on dev loop7p2, logical block 1008, async page read [ 83.441174][ T4833] Buffer I/O error on dev loop7p4, logical block 1008, async page read [ 83.490914][ T5276] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 83.525003][ T5276] EXT4-fs (loop7): 1 truncate cleaned up [ 83.530664][ T5276] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,,errors=continue [ 83.684156][ T5274] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 83.692131][ T5274] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 83.702639][ T5274] F2FS-fs (loop4): Found nat_bits in checkpoint [ 83.758788][ T5274] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 83.766218][ T5274] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 84.100001][ T5270] F2FS-fs (loop1): Found nat_bits in checkpoint [ 84.149222][ T5270] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 84.418474][ T5338] netlink: 'syz.4.2142': attribute type 30 has an invalid length. [ 84.524351][ T5343] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 84.552585][ T5340] FAT-fs (loop6): Directory bread(block 64) failed [ 84.577772][ T5340] FAT-fs (loop6): Directory bread(block 65) failed [ 84.595376][ T5340] FAT-fs (loop6): Directory bread(block 66) failed [ 84.626358][ T5340] FAT-fs (loop6): Directory bread(block 67) failed [ 84.632981][ T5340] FAT-fs (loop6): Directory bread(block 68) failed [ 84.657009][ T5340] FAT-fs (loop6): Directory bread(block 69) failed [ 84.663919][ T5340] FAT-fs (loop6): Directory bread(block 70) failed [ 84.670479][ T5340] FAT-fs (loop6): Directory bread(block 71) failed [ 84.677117][ T5340] FAT-fs (loop6): Directory bread(block 72) failed [ 84.683692][ T5340] FAT-fs (loop6): Directory bread(block 73) failed [ 84.714149][ T5347] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 84.721994][ T5347] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 84.731412][ T5347] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 84.769067][ T5347] F2FS-fs (loop1): Found nat_bits in checkpoint [ 84.783810][ T5355] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 84.842493][ T5355] EXT4-fs error (device loop4): ext4_orphan_get:1395: inode #15: comm syz.4.2149: inode has both inline data and extents flags [ 84.885515][ T5355] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.2149: couldn't read orphan inode 15 (err -117) [ 84.907828][ T5355] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=./file0,,errors=continue [ 84.919117][ T5347] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 84.924434][ T5359] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 84.926239][ T5347] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 84.971103][ T5359] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 84.981060][ T5359] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 84.988416][ T5359] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.052055][ T5359] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 85.059382][ T5359] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 85.130633][ T5357] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 85.146173][ T5357] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 85.159108][ T5357] F2FS-fs (loop7): invalid crc value [ 85.259001][ T5357] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 85.301554][ T5357] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 85.312945][ T5357] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 85.403937][ T3092] attempt to access beyond end of device [ 85.403937][ T3092] loop7: rw=2049, want=45104, limit=40427 [ 85.585817][ T5385] F2FS-fs (loop1): invalid crc value [ 85.598388][ T5385] F2FS-fs (loop1): Ignore s_resuid=60928, s_resgid=0 w/o reserve_root [ 85.624394][ T5385] F2FS-fs (loop1): Found nat_bits in checkpoint [ 85.657671][ T4833] print_req_error: 20 callbacks suppressed [ 85.657685][ T4833] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 85.677829][ T301] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 85.687613][ T5385] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 85.696333][ T301] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.702275][ T4833] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.719856][ T4833] buffer_io_error: 4 callbacks suppressed [ 85.726849][ T301] Buffer I/O error on dev loop7p2, logical block 1008, async page read [ 85.739989][ T4833] Buffer I/O error on dev loop7p4, logical block 1008, async page read [ 85.754789][ T301] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 85.775195][ T4833] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 85.782941][ T301] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.789654][ T4833] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.809630][ T301] Buffer I/O error on dev loop7p2, logical block 1008, async page read [ 85.811171][ T4833] Buffer I/O error on dev loop7p4, logical block 1008, async page read [ 85.839990][ T4833] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 85.853639][ T301] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 85.869594][ T4833] Buffer I/O error on dev loop7p4, logical block 1008, async page read [ 85.884439][ T301] Buffer I/O error on dev loop7p2, logical block 1008, async page read [ 85.888469][ T5432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2173'. [ 85.918786][ T4833] Buffer I/O error on dev loop7p4, logical block 1008, async page read [ 85.932184][ T5438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2178'. [ 85.935147][ T301] Buffer I/O error on dev loop7p2, logical block 1008, async page read [ 86.066724][ T5450] netlink: 'syz.4.2183': attribute type 2 has an invalid length. [ 86.289265][ T5456] EXT4-fs (loop1): Test dummy encryption mode enabled [ 86.289937][ T5452] F2FS-fs (loop4): invalid crc value [ 86.303519][ T5452] F2FS-fs (loop4): Found nat_bits in checkpoint [ 86.304016][ T5456] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.339931][ T5452] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 86.376738][ T279] attempt to access beyond end of device [ 86.376738][ T279] loop4: rw=2049, want=45104, limit=40427 [ 86.394098][ T5456] EXT4-fs (loop1): 1 truncate cleaned up [ 86.399769][ T5456] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,journal_ioprio=0x0000000000000006,errors=remount-ro, [ 86.467829][ T5443] F2FS-fs (loop3): invalid crc value [ 86.490908][ T5456] ------------[ cut here ]------------ [ 86.496802][ T5456] WARNING: CPU: 1 PID: 5456 at fs/crypto/fname.c:542 fscrypt_fname_siphash+0xaa/0xe0 [ 86.496817][ T5443] F2FS-fs (loop3): Found nat_bits in checkpoint [ 86.512812][ T5456] Modules linked in: [ 86.520731][ T5456] CPU: 1 PID: 5456 Comm: syz.1.2186 Tainted: G W syzkaller #0 [ 86.535518][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.552387][ T5456] RIP: 0010:fscrypt_fname_siphash+0xaa/0xe0 [ 86.555623][ T5443] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 86.559421][ T5456] Code: d8 48 c1 e8 03 42 0f b6 04 20 84 c0 75 34 8b 33 49 83 c6 48 4c 89 f2 e8 c4 82 a0 00 5b 41 5c 41 5e 41 5f 5d c3 e8 36 aa a9 ff <0f> 0b eb b1 44 89 f9 80 e1 07 38 c1 7c 9c 4c 89 ff e8 30 26 e4 ff [ 86.565494][ T5443] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 86.584995][ T5456] RSP: 0018:ffffc90000f76eb0 EFLAGS: 00010283 [ 86.625877][ T5456] RAX: ffffffff81bb0b9a RBX: ffffc90000f76fa0 RCX: 0000000000080000 [ 86.629150][ T4833] Buffer I/O error on dev loop7p4, logical block 1008, async page read [ 86.634774][ T5456] RDX: ffffc9000194c000 RSI: 0000000000001da7 RDI: 0000000000001da8 [ 86.650758][ T5456] RBP: ffffc90000f76ed0 R08: ffff88811e728000 R09: 0000000000000007 [ 86.656346][ T301] Buffer I/O error on dev loop7p2, logical block 1008, async page read [ 86.660326][ T5456] R10: 0000000000000006 R11: 0000000000000002 R12: dffffc0000000000 [ 86.675940][ T5456] R13: ffff88811b72aaf0 R14: ffff88811b769190 R15: ffff88811b7691e8 [ 86.686790][ T5456] FS: 00007fcf954986c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 86.710206][ T5456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.718174][ T5476] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2191'. [ 86.727183][ T5456] CR2: 0000200000000240 CR3: 000000011c35d000 CR4: 00000000003506b0 [ 86.735281][ T5476] device gretap0 entered promiscuous mode [ 86.735381][ T5456] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.745059][ T5476] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2191'. [ 86.748989][ T5456] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.758254][ T5476] 0ªX¹¦D: renamed from gretap0 [ 86.765826][ T5456] Call Trace: [ 86.765847][ T5456] __ext4fs_dirhash+0x85b/0xec0 [ 86.765865][ T5456] ? ext4fs_dirhash+0x2f0/0x2f0 [ 86.783680][ T5456] ext4fs_dirhash+0x15b/0x2f0 [ 86.784296][ T5476] device 30ªX¹¦D left promiscuous mode [ 86.788361][ T5456] ? ext4_sync_file+0x9f0/0x9f0 [ 86.788381][ T5456] htree_dirblock_to_tree+0x6c1/0xe20 [ 86.795066][ T5476] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 86.799685][ T5456] ? ext4_htree_fill_tree+0x1160/0x1160 [ 86.825701][ T54] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 86.833313][ T5456] ? __kasan_kmalloc+0xda/0x110 [ 86.838466][ T5456] ? kmem_cache_alloc_trace+0x181/0x2e0 [ 86.844232][ T5456] ? ext4_readdir+0x4a1/0x3ab0 [ 86.849089][ T5456] ? iterate_dir+0x260/0x570 [ 86.854006][ T5456] ? ovl_dir_read+0xf9/0x560 [ 86.858787][ T5456] ? ovl_check_d_type_supported+0xbd/0x150 [ 86.865106][ T5456] ext4_htree_fill_tree+0x625/0x1160 [ 86.870796][ T5456] ? ext4_handle_dirty_dirblock+0x650/0x650 [ 86.877164][ T5456] ? ext4_readdir+0x4a1/0x3ab0 [ 86.882218][ T5456] ext4_readdir+0x2c49/0x3ab0 [ 86.890827][ T5456] ? __kasan_check_read+0x11/0x20 [ 86.896174][ T5456] ? preempt_schedule_irq+0xca/0x120 [ 86.901531][ T5456] ? preempt_schedule_notrace+0x120/0x120 [ 86.907498][ T5456] ? ext4_dir_llseek+0x470/0x470 [ 86.915782][ T5456] ? sysvec_reschedule_ipi+0x69/0x70 [ 86.921087][ T5456] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 86.927982][ T5456] ? __kasan_check_write+0x14/0x20 [ 86.933221][ T5456] iterate_dir+0x260/0x570 [ 86.938104][ T5456] ? ext4_dir_llseek+0x470/0x470 [ 86.943276][ T5456] ovl_dir_read+0xf9/0x560 [ 86.948290][ T5456] ? security_inode_alloc+0x33/0x110 [ 86.963021][ T5456] ? memcpy+0x56/0x70 [ 86.971278][ T5456] ovl_check_d_type_supported+0xbd/0x150 [ 86.985058][ T5456] ? ovl_cleanup_whiteouts+0x2d0/0x2d0 [ 86.990572][ T5456] ? ovl_lookup_inode+0x140/0x140 [ 87.001357][ T5456] ? ovl_check_d_type_supported+0x150/0x150 [ 87.013371][ T5456] ? _raw_spin_unlock+0x4d/0x70 [ 87.028667][ T5456] ? unlock_new_inode+0x97/0xc0 [ 87.033947][ T5456] ovl_get_workdir+0x4ce/0xda0 [ 87.038774][ T5456] ? ovl_get_upper+0x4af/0x660 [ 87.044280][ T5456] ? ovl_get_upper+0x660/0x660 [ 87.049092][ T5456] ? ovl_fill_super+0x2560/0x2560 [ 87.054477][ T5456] ? __kmalloc+0x1a4/0x330 [ 87.059036][ T5456] ? ovl_fill_super+0x11ac/0x2560 [ 87.073609][ T5456] ovl_fill_super+0x15ff/0x2560 [ 87.079979][ T5456] ? ovl_mount+0x40/0x40 [ 87.084550][ T5456] ? register_shrinker_prepared+0x11d/0x160 [ 87.090558][ T5456] ? sget+0x4a0/0x4c0 [ 87.094827][ T5456] ? ovl_mount+0x40/0x40 [ 87.099116][ T5456] mount_nodev+0x5c/0xf0 [ 87.103357][ T5456] ovl_mount+0x2c/0x40 [ 87.107538][ T5456] legacy_get_tree+0xed/0x190 [ 87.112221][ T5456] ? virtio_fs_request_complete+0xaf0/0xaf0 [ 87.118421][ T5456] vfs_get_tree+0x89/0x260 [ 87.122848][ T5456] do_new_mount+0x25a/0xa20 [ 87.127388][ T5456] path_mount+0x585/0xc90 [ 87.131899][ T5456] __se_sys_mount+0x320/0x390 [ 87.136832][ T5456] ? __x64_sys_mount+0xd0/0xd0 [ 87.141607][ T5456] __x64_sys_mount+0xbf/0xd0 [ 87.146302][ T5456] do_syscall_64+0x31/0x40 [ 87.150724][ T5456] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 87.156707][ T5456] RIP: 0033:0x7fcf96a3bcb9 [ 87.161118][ T5456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.183753][ T54] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 87.200727][ T5456] RSP: 002b:00007fcf95498028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.214281][ T54] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.219098][ T5456] RAX: ffffffffffffffda RBX: 00007fcf96cb6fa0 RCX: 00007fcf96a3bcb9 [ 87.229005][ T54] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 87.229018][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.229652][ T54] usb 5-1: config 0 descriptor?? [ 87.243733][ T5456] RDX: 0000200000000b80 RSI: 0000200000000000 RDI: 0000000000000000 [ 87.260556][ T5456] RBP: 00007fcf96aa9bf7 R08: 0000200000000680 R09: 0000000000000000 [ 87.273154][ T5456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.281383][ T5456] R13: 00007fcf96cb7038 R14: 00007fcf96cb6fa0 R15: 00007ffe208aab08 [ 87.291395][ T5456] ---[ end trace da0f11f37706709c ]--- [ 87.291476][ T5456] ------------[ cut here ]------------ [ 87.291497][ T5456] WARNING: CPU: 1 PID: 5456 at fs/crypto/fname.c:542 fscrypt_fname_siphash+0xaa/0xe0 [ 87.291499][ T5456] Modules linked in: [ 87.291516][ T5456] CPU: 1 PID: 5456 Comm: syz.1.2186 Tainted: G W syzkaller #0 [ 87.291521][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.291533][ T5456] RIP: 0010:fscrypt_fname_siphash+0xaa/0xe0 [ 87.291543][ T5456] Code: d8 48 c1 e8 03 42 0f b6 04 20 84 c0 75 34 8b 33 49 83 c6 48 4c 89 f2 e8 c4 82 a0 00 5b 41 5c 41 5e 41 5f 5d c3 e8 36 aa a9 ff <0f> 0b eb b1 44 89 f9 80 e1 07 38 c1 7c 9c 4c 89 ff e8 30 26 e4 ff [ 87.291549][ T5456] RSP: 0018:ffffc90000f76eb0 EFLAGS: 00010246 [ 87.291560][ T5456] RAX: ffffffff81bb0b9a RBX: ffffc90000f76fa0 RCX: 0000000000080000 [ 87.291567][ T5456] RDX: ffffc9000194c000 RSI: 000000000007ffff RDI: 0000000000080000 [ 87.291578][ T5456] RBP: ffffc90000f76ed0 R08: ffff88811e728000 R09: 0000000000000007 [ 87.291598][ T5456] R10: 0000000000000006 R11: 0000000000000002 R12: dffffc0000000000 [ 87.291605][ T5456] R13: ffff88811b72aaf0 R14: ffff88811b769190 R15: ffff88811b7691e8 [ 87.291614][ T5456] FS: 00007fcf954986c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 87.291622][ T5456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.291629][ T5456] CR2: 000000110c25de5d CR3: 000000011c35d000 CR4: 00000000003506a0 [ 87.291638][ T5456] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.291645][ T5456] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.291648][ T5456] Call Trace: [ 87.291662][ T5456] __ext4fs_dirhash+0x85b/0xec0 [ 87.291673][ T5456] ? ext4fs_dirhash+0x2f0/0x2f0 [ 87.291684][ T5456] ext4fs_dirhash+0x15b/0x2f0 [ 87.291693][ T5456] ? ext4_sync_file+0x9f0/0x9f0 [ 87.291707][ T5456] htree_dirblock_to_tree+0x6c1/0xe20 [ 87.291719][ T5456] ? ext4_htree_fill_tree+0x1160/0x1160 [ 87.291729][ T5456] ? __kasan_kmalloc+0xda/0x110 [ 87.291746][ T5456] ? kmem_cache_alloc_trace+0x181/0x2e0 [ 87.291757][ T5456] ? ovl_dir_read+0xf9/0x560 [ 87.291765][ T5456] ? ovl_check_d_type_supported+0xbd/0x150 [ 87.291777][ T5456] ext4_htree_fill_tree+0x625/0x1160 [ 87.291789][ T5456] ? ext4_handle_dirty_dirblock+0x650/0x650 [ 87.291802][ T5456] ? ext4_readdir+0x4a1/0x3ab0 [ 87.291810][ T5456] ext4_readdir+0x2c49/0x3ab0 [ 87.291823][ T5456] ? __kasan_check_read+0x11/0x20 [ 87.291834][ T5456] ? preempt_schedule_irq+0xca/0x120 [ 87.291843][ T5456] ? preempt_schedule_notrace+0x120/0x120 [ 87.291852][ T5456] ? ext4_dir_llseek+0x470/0x470 [ 87.291865][ T5456] ? sysvec_reschedule_ipi+0x69/0x70 [ 87.291874][ T5456] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 87.291885][ T5456] ? __kasan_check_write+0x14/0x20 [ 87.291895][ T5456] iterate_dir+0x260/0x570 [ 87.291903][ T5456] ? ext4_dir_llseek+0x470/0x470 [ 87.291912][ T5456] ovl_dir_read+0xf9/0x560 [ 87.291924][ T5456] ? security_inode_alloc+0x33/0x110 [ 87.291934][ T5456] ? memcpy+0x56/0x70 [ 87.291944][ T5456] ovl_check_d_type_supported+0xbd/0x150 [ 87.291961][ T5456] ? ovl_cleanup_whiteouts+0x2d0/0x2d0 [ 87.291970][ T5456] ? ovl_lookup_inode+0x140/0x140 [ 87.291980][ T5456] ? ovl_check_d_type_supported+0x150/0x150 [ 87.291991][ T5456] ? _raw_spin_unlock+0x4d/0x70 [ 87.292002][ T5456] ? unlock_new_inode+0x97/0xc0 [ 87.292013][ T5456] ovl_get_workdir+0x4ce/0xda0 [ 87.292024][ T5456] ? ovl_get_upper+0x4af/0x660 [ 87.292035][ T5456] ? ovl_get_upper+0x660/0x660 [ 87.292045][ T5456] ? ovl_fill_super+0x2560/0x2560 [ 87.292059][ T5456] ? __kmalloc+0x1a4/0x330 [ 87.292070][ T5456] ? ovl_fill_super+0x11ac/0x2560 [ 87.292081][ T5456] ovl_fill_super+0x15ff/0x2560 [ 87.292095][ T5456] ? ovl_mount+0x40/0x40 [ 87.292107][ T5456] ? register_shrinker_prepared+0x11d/0x160 [ 87.292117][ T5456] ? sget+0x4a0/0x4c0 [ 87.292127][ T5456] ? ovl_mount+0x40/0x40 [ 87.292137][ T5456] mount_nodev+0x5c/0xf0 [ 87.292147][ T5456] ovl_mount+0x2c/0x40 [ 87.292157][ T5456] legacy_get_tree+0xed/0x190 [ 87.292167][ T5456] ? virtio_fs_request_complete+0xaf0/0xaf0 [ 87.292179][ T5456] vfs_get_tree+0x89/0x260 [ 87.292190][ T5456] do_new_mount+0x25a/0xa20 [ 87.292202][ T5456] path_mount+0x585/0xc90 [ 87.292214][ T5456] __se_sys_mount+0x320/0x390 [ 87.292224][ T5456] ? __x64_sys_mount+0xd0/0xd0 [ 87.292235][ T5456] __x64_sys_mount+0xbf/0xd0 [ 87.292244][ T5456] do_syscall_64+0x31/0x40 [ 87.292256][ T5456] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 87.292264][ T5456] RIP: 0033:0x7fcf96a3bcb9 [ 87.292274][ T5456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.292280][ T5456] RSP: 002b:00007fcf95498028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.292292][ T5456] RAX: ffffffffffffffda RBX: 00007fcf96cb6fa0 RCX: 00007fcf96a3bcb9 [ 87.292299][ T5456] RDX: 0000200000000b80 RSI: 0000200000000000 RDI: 0000000000000000 [ 87.292305][ T5456] RBP: 00007fcf96aa9bf7 R08: 0000200000000680 R09: 0000000000000000 [ 87.292311][ T5456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.292318][ T5456] R13: 00007fcf96cb7038 R14: 00007fcf96cb6fa0 R15: 00007ffe208aab08 [ 87.292327][ T5456] ---[ end trace da0f11f37706709d ]--- [ 87.292396][ T5456] ------------[ cut here ]------------ [ 87.292413][ T5456] WARNING: CPU: 1 PID: 5456 at fs/crypto/fname.c:542 fscrypt_fname_siphash+0xaa/0xe0 [ 87.292415][ T5456] Modules linked in: [ 87.292429][ T5456] CPU: 1 PID: 5456 Comm: syz.1.2186 Tainted: G W syzkaller #0 [ 87.292434][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.292446][ T5456] RIP: 0010:fscrypt_fname_siphash+0xaa/0xe0 [ 87.292455][ T5456] Code: d8 48 c1 e8 03 42 0f b6 04 20 84 c0 75 34 8b 33 49 83 c6 48 4c 89 f2 e8 c4 82 a0 00 5b 41 5c 41 5e 41 5f 5d c3 e8 36 aa a9 ff <0f> 0b eb b1 44 89 f9 80 e1 07 38 c1 7c 9c 4c 89 ff e8 30 26 e4 ff [ 87.292461][ T5456] RSP: 0018:ffffc90000f76eb0 EFLAGS: 00010246 [ 87.292471][ T5456] RAX: ffffffff81bb0b9a RBX: ffffc90000f76fa0 RCX: 0000000000080000 [ 87.292477][ T5456] RDX: ffffc9000194c000 RSI: 000000000007ffff RDI: 0000000000080000 [ 87.292484][ T5456] RBP: ffffc90000f76ed0 R08: ffff88811e728000 R09: 0000000000000007 [ 87.292491][ T5456] R10: 0000000000000006 R11: 0000000000000002 R12: dffffc0000000000 [ 87.292498][ T5456] R13: ffff88811b72aaf0 R14: ffff88811b769190 R15: ffff88811b7691e8 [ 87.292508][ T5456] FS: 00007fcf954986c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 87.292515][ T5456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.292523][ T5456] CR2: 000000110c25de5d CR3: 000000011c35d000 CR4: 00000000003506a0 [ 87.292532][ T5456] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.292539][ T5456] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.292542][ T5456] Call Trace: [ 87.292555][ T5456] __ext4fs_dirhash+0x85b/0xec0 [ 87.292565][ T5456] ? ext4fs_dirhash+0x2f0/0x2f0 [ 87.292578][ T5456] ext4fs_dirhash+0x15b/0x2f0 [ 87.292588][ T5456] ? ext4_sync_file+0x9f0/0x9f0 [ 87.292601][ T5456] htree_dirblock_to_tree+0x6c1/0xe20 [ 87.292614][ T5456] ? ext4_htree_fill_tree+0x1160/0x1160 [ 87.292624][ T5456] ? __kasan_kmalloc+0xda/0x110 [ 87.292635][ T5456] ? kmem_cache_alloc_trace+0x181/0x2e0 [ 87.292645][ T5456] ? ovl_dir_read+0xf9/0x560 [ 87.292655][ T5456] ? ovl_check_d_type_supported+0xbd/0x150 [ 87.292666][ T5456] ext4_htree_fill_tree+0x625/0x1160 [ 87.292679][ T5456] ? ext4_handle_dirty_dirblock+0x650/0x650 [ 87.292692][ T5456] ? ext4_readdir+0x4a1/0x3ab0 [ 87.292701][ T5456] ext4_readdir+0x2c49/0x3ab0 [ 87.292715][ T5456] ? __kasan_check_read+0x11/0x20 [ 87.292725][ T5456] ? preempt_schedule_irq+0xca/0x120 [ 87.292734][ T5456] ? preempt_schedule_notrace+0x120/0x120 [ 87.292743][ T5456] ? ext4_dir_llseek+0x470/0x470 [ 87.292754][ T5456] ? sysvec_reschedule_ipi+0x69/0x70 [ 87.292762][ T5456] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 87.292774][ T5456] ? __kasan_check_write+0x14/0x20 [ 87.292784][ T5456] iterate_dir+0x260/0x570 [ 87.292794][ T5456] ? ext4_dir_llseek+0x470/0x470 [ 87.292804][ T5456] ovl_dir_read+0xf9/0x560 [ 87.292816][ T5456] ? security_inode_alloc+0x33/0x110 [ 87.292826][ T5456] ? memcpy+0x56/0x70 [ 87.292837][ T5456] ovl_check_d_type_supported+0xbd/0x150 [ 87.292848][ T5456] ? ovl_cleanup_whiteouts+0x2d0/0x2d0 [ 87.292856][ T5456] ? ovl_lookup_inode+0x140/0x140 [ 87.292867][ T5456] ? ovl_check_d_type_supported+0x150/0x150 [ 87.292879][ T5456] ? _raw_spin_unlock+0x4d/0x70 [ 87.292890][ T5456] ? unlock_new_inode+0x97/0xc0 [ 87.292903][ T5456] ovl_get_workdir+0x4ce/0xda0 [ 87.292914][ T5456] ? ovl_get_upper+0x4af/0x660 [ 87.292924][ T5456] ? ovl_get_upper+0x660/0x660 [ 87.292934][ T5456] ? ovl_fill_super+0x2560/0x2560 [ 87.292954][ T5456] ? __kmalloc+0x1a4/0x330 [ 87.292965][ T5456] ? ovl_fill_super+0x11ac/0x2560 [ 87.292977][ T5456] ovl_fill_super+0x15ff/0x2560 [ 87.292991][ T5456] ? ovl_mount+0x40/0x40 [ 87.293002][ T5456] ? register_shrinker_prepared+0x11d/0x160 [ 87.293013][ T5456] ? sget+0x4a0/0x4c0 [ 87.293024][ T5456] ? ovl_mount+0x40/0x40 [ 87.293035][ T5456] mount_nodev+0x5c/0xf0 [ 87.293044][ T5456] ovl_mount+0x2c/0x40 [ 87.293055][ T5456] legacy_get_tree+0xed/0x190 [ 87.293064][ T5456] ? virtio_fs_request_complete+0xaf0/0xaf0 [ 87.293075][ T5456] vfs_get_tree+0x89/0x260 [ 87.293085][ T5456] do_new_mount+0x25a/0xa20 [ 87.293095][ T5456] path_mount+0x585/0xc90 [ 87.293108][ T5456] __se_sys_mount+0x320/0x390 [ 87.293120][ T5456] ? __x64_sys_mount+0xd0/0xd0 [ 87.293132][ T5456] __x64_sys_mount+0xbf/0xd0 [ 87.293142][ T5456] do_syscall_64+0x31/0x40 [ 87.293155][ T5456] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 87.293163][ T5456] RIP: 0033:0x7fcf96a3bcb9 [ 87.293172][ T5456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.293179][ T5456] RSP: 002b:00007fcf95498028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 87.293193][ T5456] RAX: ffffffffffffffda RBX: 00007fcf96cb6fa0 RCX: 00007fcf96a3bcb9 [ 87.293200][ T5456] RDX: 0000200000000b80 RSI: 0000200000000000 RDI: 0000000000000000 [ 87.293207][ T5456] RBP: 00007fcf96aa9bf7 R08: 0000200000000680 R09: 0000000000000000 [ 87.293213][ T5456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.293221][ T5456] R13: 00007fcf96cb7038 R14: 00007fcf96cb6fa0 R15: 00007ffe208aab08 [ 87.293229][ T5456] ---[ end trace da0f11f37706709e ]--- [ 87.312962][ T275] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #2: comm syz-executor: Siphash requires key [ 87.312977][ T275] EXT4-fs warning (device loop1): __ext4fs_dirhash:270: inode #2: comm syz-executor: Siphash requires key [ 87.312997][ T275] EXT4-fs error (device loop1): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 87.313156][ T275] EXT4-fs (loop1): Remounting filesystem read-only [ 87.672277][ T5499] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.454658][ T54] nintendo 0003:057E:2009.001C: item fetching failed at offset 4/5 [ 88.463225][ T54] nintendo 0003:057E:2009.001C: HID parse failed [ 88.469679][ T54] nintendo 0003:057E:2009.001C: probe - fail = -22 [ 88.476407][ T54] nintendo: probe of 0003:057E:2009.001C failed with error -22 [ 88.485391][ T54] usb 5-1: USB disconnect, device number 13 [ 88.495756][ T5499] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.503558][ T5499] device bridge_slave_0 entered promiscuous mode [ 88.510734][ T5499] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.518219][ T5499] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.525652][ T5499] device bridge_slave_1 entered promiscuous mode [ 88.658488][ T24] kauditd_printk_skb: 9 callbacks suppressed [ 88.658497][ T24] audit: type=1400 audit(2000000064.489:575): avc: denied { validate_trans } for pid=5531 comm="syz.6.2217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 88.777063][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.793903][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.833936][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.851658][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.868968][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.876139][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.898404][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.923763][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.933972][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.941097][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.982682][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.990771][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.999741][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.009639][ T7] device bridge_slave_1 left promiscuous mode [ 89.016189][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.024592][ T7] device bridge_slave_0 left promiscuous mode [ 89.030728][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.039534][ T7] device veth1_macvtap left promiscuous mode [ 89.046158][ T5530] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 89.054416][ T7] device veth0_vlan left promiscuous mode [ 89.060298][ T5530] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 89.074876][ T5530] F2FS-fs (loop7): invalid crc value [ 89.114095][ T5530] F2FS-fs (loop7): Found nat_bits in checkpoint [ 89.123252][ T5570] mmap: syz.6.2234 (5570): VmData 40828928 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 89.136345][ T2992] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 89.153412][ T5557] F2FS-fs (loop3): invalid crc value [ 89.168995][ T5557] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 89.178562][ T5530] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 89.189855][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.198089][ T5530] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 89.204489][ T5557] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 89.212471][ T5557] F2FS-fs (loop3): Start checkpoint disabled! [ 89.216073][ T5499] device veth0_vlan entered promiscuous mode [ 89.224748][ T5557] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 89.251658][ T24] audit: type=1400 audit(2000000065.079:576): avc: denied { create } for pid=5556 comm="syz.3.2229" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 89.294088][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.302519][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.315255][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.315554][ T3836] attempt to access beyond end of device [ 89.315554][ T3836] loop3: rw=2049, want=45104, limit=40427 [ 89.350154][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.369288][ T5499] device veth1_macvtap entered promiscuous mode [ 89.380292][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.393975][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.536206][ T5596] netlink: 'syz.3.2237': attribute type 13 has an invalid length. [ 89.543686][ T2992] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.555695][ T5596] netlink: 'syz.3.2237': attribute type 13 has an invalid length. [ 89.556090][ T2992] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 89.623995][ T5606] SELinux: Context : is not valid (left unmapped). [ 89.630781][ T24] audit: type=1400 audit(2000000065.459:577): avc: denied { relabelto } for pid=5604 comm="syz.7.2246" name="rdma.current" dev="tmpfs" ino=1384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 89.656632][ T24] audit: type=1400 audit(2000000065.459:578): avc: denied { associate } for pid=5604 comm="syz.7.2246" name="rdma.current" dev="tmpfs" ino=1384 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 89.682066][ T24] audit: type=1400 audit(2000000065.489:579): avc: denied { unlink } for pid=3092 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=1384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 89.684324][ T5603] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,max_dir_size_kb=0x0000000000000a30,journal_dev=0x00000000460b8000,,errors=continue [ 89.722466][ T5603] ext4 filesystem being mounted at /419/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.773712][ T2992] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.783223][ T2992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.793421][ T2992] usb 5-1: Product: syz [ 89.797886][ T2992] usb 5-1: Manufacturer: syz [ 89.802720][ T2992] usb 5-1: SerialNumber: syz [ 89.862408][ T24] audit: type=1400 audit(2000000065.689:580): avc: denied { remount } for pid=5619 comm="syz.3.2250" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 89.902067][ T5624] xt_hashlimit: size too large, truncated to 1048576 [ 89.924940][ T5614] F2FS-fs (loop7): invalid crc value [ 89.931768][ T5614] F2FS-fs (loop7): Found nat_bits in checkpoint [ 89.970080][ T5614] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 90.042376][ T296] attempt to access beyond end of device [ 90.042376][ T296] loop7: rw=2049, want=40976, limit=40427 [ 90.045411][ T5555] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.061383][ T5614] VFS:Filesystem freeze failed [ 90.183528][ T297] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 90.503650][ T2992] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 90.509774][ T2992] cdc_ncm 5-1:1.0: bind() failure [ 90.524760][ T2992] cdc_ncm 5-1:1.1: bind() failure [ 90.543627][ T297] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.543633][ T2992] usb 5-1: USB disconnect, device number 14 [ 90.569011][ T297] usb 9-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 90.578562][ T297] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.593947][ T297] usb 9-1: config 0 descriptor?? [ 90.638627][ T5639] F2FS-fs (loop3): invalid crc value [ 90.670648][ T5639] F2FS-fs (loop3): Found nat_bits in checkpoint [ 90.709326][ T5639] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 90.751537][ T5639] F2FS-fs (loop3): Corrupted max_depth of 3: 16842753 [ 91.081953][ T297] zeroplus 0003:0C12:0005.001D: hidraw0: USB HID v0.02 Device [HID 0c12:0005] on usb-dummy_hcd.8-1/input0 [ 91.104217][ T297] zeroplus 0003:0C12:0005.001D: no inputs found [ 91.203538][ T296] tipc: Left network mode [ 91.280122][ T319] usb 9-1: USB disconnect, device number 2 [ 91.345424][ T301] print_req_error: 94 callbacks suppressed [ 91.345438][ T301] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 91.368529][ T4833] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 91.396899][ T301] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.408696][ T4833] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.426168][ T301] buffer_io_error: 42 callbacks suppressed [ 91.426177][ T301] Buffer I/O error on dev loop7p2, logical block 1008, async page read [ 91.444264][ T4833] Buffer I/O error on dev loop7p4, logical block 1008, async page read [ 91.458435][ T4833] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 91.460009][ T301] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 91.470558][ T4833] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.483887][ T301] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.493132][ T4833] Buffer I/O error on dev loop7p4, logical block 1008, async page read [ 91.507480][ T301] Buffer I/O error on dev loop7p2, logical block 1008, async page read [ 91.526768][ T4833] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 91.541520][ T301] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 91.553425][ T301] Buffer I/O error on dev loop7p2, logical block 1008, async page read [ 91.563254][ T4833] Buffer I/O error on dev loop7p4, logical block 1008, async page read [ 91.569094][ T5681] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.579825][ T5681] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.587015][ T24] audit: type=1326 audit(2000000067.409:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5690 comm="syz.7.2280" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1df3a4ecb9 code=0x0 [ 91.588665][ T5681] device bridge_slave_0 entered promiscuous mode [ 91.617682][ T5681] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.617863][ T4833] Buffer I/O error on dev loop7p4, logical block 1008, async page read [ 91.626151][ T301] Buffer I/O error on dev loop7p2, logical block 1008, async page read [ 91.633671][ T5681] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.650776][ T5681] device bridge_slave_1 entered promiscuous mode [ 91.663585][ T301] Buffer I/O error on dev loop7p2, logical block 1008, async page read [ 91.665191][ T4833] Buffer I/O error on dev loop7p4, logical block 1008, async page read [ 91.693562][ T297] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 91.746999][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.754928][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.770578][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.784389][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.792732][ T3836] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.800144][ T3836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.808311][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.817709][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.831280][ T3836] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.838353][ T3836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.846780][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.860348][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.879504][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.882208][ T5713] EXT4-fs (loop7): Ignoring removed bh option [ 91.888350][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.902190][ T5713] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 91.907990][ T5681] device veth0_vlan entered promiscuous mode [ 91.915011][ T5713] EXT4-fs (loop7): 1 truncate cleaned up [ 91.917000][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.922050][ T5713] EXT4-fs (loop7): mounted filesystem without journal. Opts: data_err=abort,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue [ 91.931077][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.955159][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.980321][ T5681] device veth1_macvtap entered promiscuous mode [ 91.987883][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.003744][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.012287][ T3836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.064296][ T297] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.089326][ T24] audit: type=1400 audit(2000000067.919:582): avc: denied { setattr } for pid=5724 comm="syz.9.2294" name="/" dev="incremental-fs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.112974][ T297] usb 5-1: config 0 interface 0 has no altsetting 0 [ 92.113553][ T1568] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 92.120425][ T297] usb 5-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 92.136728][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.152480][ T296] device bridge_slave_1 left promiscuous mode [ 92.161614][ T297] usb 5-1: config 0 descriptor?? [ 92.167377][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.175275][ T296] device bridge_slave_0 left promiscuous mode [ 92.181864][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.190480][ T296] device veth1_macvtap left promiscuous mode [ 92.196842][ T296] device veth0_vlan left promiscuous mode [ 92.200097][ T24] audit: type=1400 audit(2000000068.039:583): avc: denied { create } for pid=5735 comm="syz.9.2299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key_socket permissive=1 [ 92.318639][ T5746] FAT-fs (loop7): Directory bread(block 64) failed [ 92.325390][ T5746] FAT-fs (loop7): Directory bread(block 65) failed [ 92.331929][ T5746] FAT-fs (loop7): Directory bread(block 66) failed [ 92.338991][ T5746] FAT-fs (loop7): Directory bread(block 67) failed [ 92.345778][ T5746] FAT-fs (loop7): Directory bread(block 68) failed [ 92.352416][ T5746] FAT-fs (loop7): Directory bread(block 69) failed [ 92.359260][ T5746] FAT-fs (loop7): Directory bread(block 70) failed [ 92.365944][ T5746] FAT-fs (loop7): Directory bread(block 71) failed [ 92.372525][ T5746] FAT-fs (loop7): Directory bread(block 72) failed [ 92.379282][ T5746] FAT-fs (loop7): Directory bread(block 73) failed [ 92.397217][ T1568] usb 9-1: Using ep0 maxpacket: 16 [ 92.407076][ T24] audit: type=1326 audit(2000000068.239:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5748 comm="syz.9.2305" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1868c4ecb9 code=0x0 [ 92.430396][ T5746] attempt to access beyond end of device [ 92.430396][ T5746] loop7: rw=2049, want=1228, limit=256 [ 92.523612][ T1568] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.534682][ T1568] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.544807][ T1568] usb 9-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 92.553888][ T1568] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.562327][ T1568] usb 9-1: config 0 descriptor?? [ 92.624759][ T5761] EXT4-fs (loop7): Ignoring removed nobh option [ 92.631154][ T5761] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 92.638602][ T5761] EXT4-fs (loop7): Test dummy encryption mode enabled [ 92.646899][ T297] wacom 0003:056A:00ED.001E: unknown main item tag 0x0 [ 92.649784][ T5761] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 92.654496][ T297] wacom 0003:056A:00ED.001E: unknown main item tag 0x0 [ 92.661560][ T5761] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 92.668919][ T297] wacom 0003:056A:00ED.001E: unknown main item tag 0x0 [ 92.685509][ T297] wacom 0003:056A:00ED.001E: unknown main item tag 0x0 [ 92.685884][ T5761] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 92.692389][ T297] wacom 0003:056A:00ED.001E: unknown main item tag 0x0 [ 92.692406][ T297] wacom 0003:056A:00ED.001E: unknown main item tag 0x0 [ 92.700737][ T5761] System zones: [ 92.707923][ T297] wacom 0003:056A:00ED.001E: unknown main item tag 0x0 [ 92.714779][ T5761] 1-12 [ 92.718309][ T297] wacom 0003:056A:00ED.001E: unknown main item tag 0x0 [ 92.724850][ T5761] [ 92.727677][ T297] wacom 0003:056A:00ED.001E: unknown main item tag 0x0 [ 92.737039][ T297] wacom 0003:056A:00ED.001E: unknown main item tag 0x0 [ 92.743719][ T5761] EXT4-fs (loop7): 1 truncate cleaned up [ 92.750815][ T297] wacom 0003:056A:00ED.001E: unknown main item tag 0x0 [ 92.756114][ T5761] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobh,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,debug,mblk_io_submit,nogrpid,,errors=continue [ 92.763268][ T297] wacom 0003:056A:00ED.001E: unknown main item tag 0x0 [ 92.787046][ T297] wacom 0003:056A:00ED.001E: unknown main item tag 0x0 [ 92.805661][ T297] wacom 0003:056A:00ED.001E: hidraw0: USB HID v0.01 Device [HID 056a:00ed] on usb-dummy_hcd.4-1/input0 [ 92.871631][ T297] usb 5-1: USB disconnect, device number 15 [ 93.034304][ T1568] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 93.041873][ T1568] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 93.049583][ T1568] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 93.057114][ T1568] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 93.064863][ T1568] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 93.072244][ T1568] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 93.079683][ T1568] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 93.087081][ T1568] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 93.094623][ T1568] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 93.101996][ T1568] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 93.109424][ T1568] hid-picolcd 0003:04D8:F002.001F: unknown main item tag 0x0 [ 93.183695][ T1568] hid-picolcd 0003:04D8:F002.001F: No report with id 0xf3 found [ 93.191348][ T1568] hid-picolcd 0003:04D8:F002.001F: No report with id 0xf4 found [ 93.251987][ T1568] usb 9-1: USB disconnect, device number 3 [ 93.493728][ T5773] F2FS-fs (loop9): invalid crc value [ 93.532331][ T5773] F2FS-fs (loop9): Found nat_bits in checkpoint [ 93.539637][ T5792] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2320'. [ 93.581609][ T5796] exfat: Deprecated parameter 'utf8' [ 93.583069][ T5773] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 93.630730][ T5796] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe649ead, utbl_chksum : 0xe619d30d) [ 93.707817][ T308] attempt to access beyond end of device [ 93.707817][ T308] loop9: rw=2049, want=40976, limit=40427 [ 93.720663][ T5773] VFS:Filesystem freeze failed [ 93.720900][ T5802] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 93.733187][ T5802] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.755560][ T5802] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 93.780942][ T5802] System zones: 0-1, 3-36 [ 93.792471][ T5802] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 93.921458][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 93.921468][ T24] audit: type=1400 audit(2000000069.749:586): avc: denied { append } for pid=5825 comm="syz.8.2337" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.050865][ T5822] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 94.052230][ T5834] tipc: Enabling of bearer rejected, failed to enable media [ 94.083343][ T5824] F2FS-fs (loop9): Unrecognized mount option "alloc_mQü%áN]kótÆ|¤ode=default" or missing value [ 94.343587][ T319] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 94.500323][ T5892] netlink: 136 bytes leftover after parsing attributes in process `syz.9.2368'. [ 94.509564][ T5892] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 94.591842][ T5886] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 94.608124][ T5886] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 94.617271][ T5886] F2FS-fs (loop8): invalid crc value [ 94.624212][ T5886] F2FS-fs (loop8): Found nat_bits in checkpoint [ 94.656397][ T5886] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 94.663529][ T5886] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 94.713568][ T319] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 94.722981][ T319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.731888][ T319] usb 5-1: config 0 descriptor?? [ 94.739421][ T5894] F2FS-fs (loop9): Found nat_bits in checkpoint [ 94.769617][ T5894] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 94.821678][ T5681] attempt to access beyond end of device [ 94.821678][ T5681] loop9: rw=2049, want=45104, limit=40427 [ 94.861660][ T5912] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2374'. [ 94.871408][ T5912] tipc: Started in network mode [ 94.876543][ T5912] tipc: Own node identity 64010101, cluster identity 4711 [ 94.883809][ T5912] tipc: Enabling of bearer rejected, failed to enable media [ 94.908507][ T24] audit: type=1400 audit(2000000070.739:587): avc: denied { getopt } for pid=5913 comm="syz.8.2375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 95.175185][ T24] audit: type=1400 audit(2000000071.009:588): avc: denied { block_suspend } for pid=297 comm="kworker/0:3" capability=36 scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=capability2 permissive=1 [ 95.215459][ T319] kye 0003:0458:0138.0020: unbalanced collection at end of report description [ 95.229038][ T319] kye 0003:0458:0138.0020: parse failed [ 95.235198][ T319] kye: probe of 0003:0458:0138.0020 failed with error -22 [ 95.249606][ T5937] F2FS-fs (loop9): fault_injection options not supported [ 95.263155][ T5937] F2FS-fs (loop9): fault_type options not supported [ 95.271251][ T5937] F2FS-fs (loop9): invalid crc value [ 95.280887][ T5937] F2FS-fs (loop9): Found nat_bits in checkpoint [ 95.304497][ T5937] F2FS-fs (loop9): Start checkpoint disabled! [ 95.311349][ T5937] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 95.372261][ T296] attempt to access beyond end of device [ 95.372261][ T296] loop9: rw=2049, want=40976, limit=40427 [ 95.416251][ T319] usb 5-1: USB disconnect, device number 16 [ 95.426816][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2401'. [ 95.495941][ T24] audit: type=1400 audit(2000000071.329:589): avc: denied { bind } for pid=5977 comm="syz.9.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.626237][ T6006] xt_hashlimit: size too large, truncated to 1048576 [ 95.674379][ T6016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.748175][ T24] audit: type=1326 audit(2000000071.579:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6028 comm="syz.9.2429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1868c4ecb9 code=0x0 [ 95.939066][ T24] audit: type=1400 audit(2000000071.769:591): avc: denied { execstack } for pid=6037 comm="syz.4.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 95.984609][ T6040] EXT4-fs (loop4): Ignoring removed oldalloc option [ 95.991360][ T6040] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.002493][ T6040] EXT4-fs (loop4): 1 truncate cleaned up [ 96.008269][ T6040] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=continue,inode_readahead_blks=0x0000000000004000,stripe=0x0000000000000003,bsdgroups,oldalloc,,errors=continue [ 96.123591][ T54] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 96.373560][ T574] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 96.483625][ T54] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.494841][ T54] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.504639][ T54] usb 9-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 96.513745][ T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.522229][ T54] usb 9-1: config 0 descriptor?? [ 96.613610][ T574] usb 5-1: Using ep0 maxpacket: 32 [ 96.694896][ T6050] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 96.733650][ T574] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 96.741877][ T574] usb 5-1: config 2 has no interface number 0 [ 96.748022][ T574] usb 5-1: config 2 interface 88 has no altsetting 0 [ 96.913572][ T574] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 96.922703][ T574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.930809][ T574] usb 5-1: Product: syz [ 96.935010][ T574] usb 5-1: Manufacturer: syz [ 96.939576][ T574] usb 5-1: SerialNumber: syz [ 97.003740][ T54] hid (null): report_id 0 is invalid [ 97.009909][ T54] hid-steam 0003:28DE:1142.0021: report_id 0 is invalid [ 97.016909][ T54] hid-steam 0003:28DE:1142.0021: item 0 1 1 8 parsing failed [ 97.024545][ T54] hid-steam 0003:28DE:1142.0021: steam_probe:parse of hid interface failed [ 97.033152][ T54] hid-steam: probe of 0003:28DE:1142.0021 failed with error -22 [ 97.209265][ T319] usb 9-1: USB disconnect, device number 4 [ 97.387588][ T298] print_req_error: 143 callbacks suppressed [ 97.387604][ T298] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 97.407219][ T301] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 97.419645][ T301] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.431483][ T298] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.443400][ T301] buffer_io_error: 67 callbacks suppressed [ 97.443409][ T301] Buffer I/O error on dev loop7p2, logical block 1008, async page read [ 97.457797][ T298] Buffer I/O error on dev loop7p4, logical block 1008, async page read [ 97.623574][ T574] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 97.633876][ T574] asix: probe of 5-1:2.88 failed with error -71 [ 97.646366][ T574] usb 5-1: USB disconnect, device number 17 [ 97.668159][ T4833] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 97.668494][ T301] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 97.680137][ T4833] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.691827][ T301] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.704247][ T4833] Buffer I/O error on dev loop7p4, logical block 1008, async page read [ 97.714475][ T301] Buffer I/O error on dev loop7p2, logical block 1008, async page read [ 97.730388][ T6068] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 97.759354][ T4833] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 97.759377][ T301] blk_update_request: I/O error, dev loop7, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.771451][ T4833] Buffer I/O error on dev loop7p4, logical block 1008, async page read [ 97.833577][ T301] Buffer I/O error on dev loop7p2, logical block 1008, async page read [ 97.856545][ T4833] Buffer I/O error on dev loop7p4, logical block 1008, async page read [ 97.885435][ T6083] loop_reread_partitions: partition scan of loop7 () failed (rc=-16) [ 97.937364][ T6083] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 97.938698][ T24] audit: type=1400 audit(2000000073.769:592): avc: denied { mounton } for pid=6082 comm="syz.7.2452" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 98.041292][ T301] udevd[301]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 98.041346][ T4833] udevd[4833]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 98.082268][ T301] udevd[301]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 98.093889][ T4833] udevd[4833]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 98.114750][ T301] udevd[301]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 98.134411][ T4833] udevd[4833]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 98.383531][ T6090] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 98.391277][ T6090] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 98.432275][ T6090] F2FS-fs (loop7): invalid crc value [ 98.452417][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2458'. [ 98.470063][ T6090] F2FS-fs (loop7): Found nat_bits in checkpoint [ 98.493609][ T54] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 98.550219][ T6090] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 98.557562][ T6090] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 98.863629][ T54] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.880141][ T54] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 98.960226][ T24] audit: type=1400 audit(2000000074.789:593): avc: denied { checkpoint_restore } for pid=6135 comm="syz.8.2474" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.063592][ T54] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.075834][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.092170][ T54] usb 5-1: Product: syz [ 99.100526][ T54] usb 5-1: Manufacturer: syz [ 99.109296][ T54] usb 5-1: SerialNumber: syz [ 99.164343][ T54] cdc_ncm 5-1:1.0: bind() failure [ 99.170397][ T54] cdc_ncm 5-1:1.1: bind() failure [ 99.366057][ T574] usb 5-1: USB disconnect, device number 18 [ 99.462584][ T6140] F2FS-fs (loop8): Test dummy encryption mode enabled [ 99.484442][ T6140] F2FS-fs (loop8): invalid crc value [ 99.494086][ T6140] F2FS-fs (loop8): Found nat_bits in checkpoint [ 99.529621][ T6140] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 99.913668][ T24] audit: type=1400 audit(2000000075.749:594): avc: denied { setopt } for pid=6155 comm="syz.4.2483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.117109][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2485'. [ 100.163107][ T6171] EXT4-fs (loop8): Ignoring removed nobh option [ 100.192495][ T6171] EXT4-fs (loop8): Ignoring removed oldalloc option [ 100.228143][ T6171] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.264867][ T6182] netlink: 'syz.4.2492': attribute type 1 has an invalid length. [ 100.273896][ T6171] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 100.293185][ T6171] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b846c01c, mo2=0002] [ 100.325724][ T6171] System zones: 0-2, 18-18, 34-34 [ 100.346850][ T6171] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -117 [ 100.376936][ T6171] EXT4-fs error (device loop8): ext4_orphan_get:1395: inode #15: comm syz.8.2487: iget: bad i_size value: 360287970189639680 [ 100.421132][ T6171] EXT4-fs error (device loop8): ext4_orphan_get:1400: comm syz.8.2487: couldn't read orphan inode 15 (err -117) [ 100.463787][ T6171] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrquota,usrjquota=.,init_itable,init_itable,nobh,data_err=abort,oldalloc,jqfmt=vfsv0,min_batch_time=0x0000000000000003,acl,,errors=continue [ 100.724585][ T6195] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 100.733793][ T6195] ext4 filesystem being mounted at /514/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.932112][ T24] audit: type=1400 audit(2000000076.759:595): avc: denied { setopt } for pid=6214 comm="syz.4.2506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.966862][ T6220] sch_fq: defrate 4294967295 ignored. [ 100.979961][ T24] audit: type=1400 audit(2000000076.809:596): avc: denied { write } for pid=6221 comm="syz.9.2509" name="usbmon2" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 101.090643][ T6237] syz.8.2516 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 101.101288][ T24] audit: type=1400 audit(2000000076.929:597): avc: denied { setcheckreqprot } for pid=6236 comm="syz.4.2517" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 101.148597][ T6237] FAT-fs (loop8): "posix" option is obsolete, not supported now [ 101.370565][ T6273] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 101.600295][ T6303] xt_hashlimit: size too large, truncated to 1048576 [ 101.612042][ T6305] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 101.634655][ T6307] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 101.792080][ T6321] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 101.801939][ T6321] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.844752][ T6325] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.857268][ T6330] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2560'. [ 101.876406][ T6325] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 101.886046][ T6325] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 101.971912][ T6340] xt_hashlimit: size too large, truncated to 1048576 [ 102.063589][ T319] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 102.184861][ T1568] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 102.230790][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2580'. [ 102.241259][ T6374] devtmpfs: Unknown parameter 'posixacl' [ 102.241278][ T6371] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 102.267001][ T6376] xt_hashlimit: size too large, truncated to 1048576 [ 102.367939][ T6382] EXT4-fs (loop6): Test dummy encryption mode enabled [ 102.383572][ T6382] EXT4-fs (loop6): Ignoring removed nobh option [ 102.389855][ T6382] EXT4-fs (loop6): Mount option "nouser_xattr" will be removed by 3.5 [ 102.389855][ T6382] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 102.389855][ T6382] [ 102.414945][ T6382] EXT4-fs (loop6): mounted filesystem without journal. Opts: inlinecrypt,usrquota,test_dummy_encryption=v1,data_err=ignore,dioread_nolock,nobh,nouser_xattr,,errors=continue [ 102.446395][ T6382] netlink: 'syz.6.2584': attribute type 5 has an invalid length. [ 102.454352][ T319] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.455619][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2584'. [ 102.477664][ T319] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 102.490221][ T319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.499081][ T319] usb 5-1: config 0 descriptor?? [ 102.547887][ T319] usb 5-1: bad CDC descriptors [ 102.573562][ T1568] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.590783][ T1568] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.603330][ T1568] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.616935][ T1568] usb 10-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 102.626229][ T1568] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.635129][ T1568] usb 10-1: config 0 descriptor?? [ 102.643110][ T6397] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 102.650734][ T6397] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 102.666193][ T6397] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 102.674309][ T6397] System zones: 1-12 [ 102.679148][ T6397] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2224: inode #15: comm syz.6.2590: corrupted in-inode xattr [ 102.692239][ T6397] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.2590: couldn't read orphan inode 15 (err -117) [ 102.704872][ T6397] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,noauto_da_alloc,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue [ 102.745788][ T319] usb 5-1: USB disconnect, device number 19 [ 102.846932][ T6416] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 102.856034][ T6416] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.860245][ T6423] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 102.880949][ T6423] EXT4-fs (loop6): Ignoring removed bh option [ 102.895354][ T6423] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,nogrpid,bh,,errors=continue [ 102.906533][ T6423] ext4 filesystem being mounted at /338/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.950041][ T24] audit: type=1326 audit(2000000078.779:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6431 comm="syz.8.2603" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73c689bcb9 code=0x0 [ 103.096241][ T6447] FAT-fs (loop6): bogus number of reserved sectors [ 103.102942][ T6447] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 103.112367][ T6447] FAT-fs (loop6): Can't find a valid FAT filesystem [ 103.114352][ T1568] acrux 0003:1A34:0802.0022: unknown main item tag 0x0 [ 103.125939][ T1568] acrux 0003:1A34:0802.0022: unknown main item tag 0x0 [ 103.132882][ T1568] acrux 0003:1A34:0802.0022: unknown main item tag 0x0 [ 103.139777][ T1568] acrux 0003:1A34:0802.0022: unknown main item tag 0x0 [ 103.146853][ T1568] acrux 0003:1A34:0802.0022: unknown main item tag 0x0 [ 103.154424][ T1568] acrux 0003:1A34:0802.0022: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.9-1/input0 [ 103.165517][ T1568] acrux 0003:1A34:0802.0022: no inputs found [ 103.171504][ T1568] acrux 0003:1A34:0802.0022: Failed to enable force feedback support, error: -19 [ 103.322115][ T756] usb 10-1: USB disconnect, device number 2 [ 103.340709][ T6464] FAT-fs (loop7): Directory bread(block 64) failed [ 103.347615][ T6464] FAT-fs (loop7): Directory bread(block 65) failed [ 103.354358][ T6464] FAT-fs (loop7): Directory bread(block 66) failed [ 103.360854][ T6464] FAT-fs (loop7): Directory bread(block 67) failed [ 103.367406][ T6464] FAT-fs (loop7): Directory bread(block 68) failed [ 103.374368][ T6464] FAT-fs (loop7): Directory bread(block 69) failed [ 103.380941][ T6464] FAT-fs (loop7): Directory bread(block 70) failed [ 103.387479][ T6464] FAT-fs (loop7): Directory bread(block 71) failed [ 103.394024][ T6464] FAT-fs (loop7): Directory bread(block 72) failed [ 103.400516][ T6464] FAT-fs (loop7): Directory bread(block 73) failed [ 103.552002][ T6481] FAT-fs (loop7): Directory bread(block 64) failed [ 103.568694][ T6481] FAT-fs (loop7): Directory bread(block 65) failed [ 103.575375][ T6481] FAT-fs (loop7): Directory bread(block 66) failed [ 103.581983][ T6481] FAT-fs (loop7): Directory bread(block 67) failed [ 103.589107][ T6481] FAT-fs (loop7): Directory bread(block 68) failed [ 103.595734][ T6481] FAT-fs (loop7): Directory bread(block 69) failed [ 103.602334][ T6481] FAT-fs (loop7): Directory bread(block 70) failed [ 103.608948][ T6481] FAT-fs (loop7): Directory bread(block 71) failed [ 103.615599][ T6481] FAT-fs (loop7): Directory bread(block 72) failed [ 103.622260][ T6481] FAT-fs (loop7): Directory bread(block 73) failed [ 103.893279][ T6493] tipc: Invalid UDP bearer configuration [ 103.893299][ T6493] tipc: Enabling of bearer rejected, failed to enable media [ 103.944045][ T6484] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 150994945) [ 103.958727][ T6484] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 103.968984][ T6484] F2FS-fs (loop4): invalid crc value [ 103.976608][ T6484] F2FS-fs (loop4): Found nat_bits in checkpoint [ 103.997617][ T6500] EXT4-fs (loop7): Ignoring removed nobh option [ 104.010593][ T6500] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobh,abort,,errors=continue [ 104.021058][ T6500] ext4 filesystem being mounted at /343/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.047766][ T6484] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 104.054232][ T6500] netlink: 276 bytes leftover after parsing attributes in process `syz.7.2630'. [ 104.063515][ T6484] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 104.364842][ T6543] EXT4-fs (loop6): Ignoring removed orlov option [ 104.375796][ T6543] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 104.391505][ T6543] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2224: inode #15: comm syz.6.2649: corrupted in-inode xattr [ 104.404137][ T6543] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.2649: couldn't read orphan inode 15 (err -117) [ 104.416401][ T6543] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,user_xattr,noload,max_dir_size_kb=0x0000000000000009,bsdgroups,init_itable=0x0000000000000601,nodiscard,,errors=continue [ 104.649413][ T6568] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 104.650198][ T6571] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.675376][ T6568] EXT4-fs (loop6): 1 truncate cleaned up [ 104.684657][ T6571] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.685784][ T6568] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,,errors=continue [ 104.928050][ T6565] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 104.933315][ T6583] EXT4-fs (loop6): Ignoring removed oldalloc option [ 104.945301][ T6582] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.953522][ T6565] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 104.964426][ T6583] EXT4-fs (loop6): Ignoring removed orlov option [ 104.971022][ T6583] EXT4-fs (loop6): Journaled quota options ignored when QUOTA feature is enabled [ 104.982907][ T6565] F2FS-fs (loop4): invalid crc value [ 104.994245][ T6582] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 105.004932][ T6582] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 105.019920][ T6565] F2FS-fs (loop4): Found nat_bits in checkpoint [ 105.029976][ T6583] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,barrier=0x0000000000000006,nodelalloc,oldalloc,quota,orlov,abort,usrjquota=.,inlinecrypt,,errors=continue [ 105.054873][ T6565] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 105.062038][ T6565] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 105.134470][ T24] audit: type=1400 audit(2000000080.969:599): avc: denied { create } for pid=6551 comm="syz.4.2655" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 105.191498][ T6615] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2676'. [ 105.244692][ T6614] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.258425][ T6614] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,nojournal_checksum,lazytime,noauto_da_alloc, [ 105.354731][ T24] audit: type=1400 audit(2000000081.189:600): avc: denied { unlink } for pid=6611 comm="syz.8.2677" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 105.549397][ T24] audit: type=1400 audit(2000000081.379:601): avc: denied { ioctl } for pid=6637 comm="syz.8.2686" path="/dev/fuse" dev="devtmpfs" ino=90 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 105.574675][ T6632] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 105.586902][ T6630] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 105.589863][ T6632] F2FS-fs (loop4): invalid crc value [ 105.600501][ T6630] EXT4-fs error (device loop6) in ext4_do_update_inode:5350: error 27 [ 105.608470][ T6632] F2FS-fs (loop4): Found nat_bits in checkpoint [ 105.609817][ T6630] EXT4-fs error (device loop6): ext4_dirty_inode:6157: inode #15: comm syz.6.2684: mark_inode_dirty error [ 105.628205][ T6630] EXT4-fs error (device loop6) in ext4_do_update_inode:5350: error 27 [ 105.636866][ T6630] EXT4-fs error (device loop6): __ext4_ext_dirty:182: inode #15: comm syz.6.2684: mark_inode_dirty error [ 105.645028][ T6632] F2FS-fs (loop4): recover fsync data on readonly fs [ 105.648491][ T6630] EXT4-fs error (device loop6) in ext4_do_update_inode:5350: error 27 [ 105.655101][ T6632] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 105.663866][ T6630] EXT4-fs error (device loop6): __ext4_ext_dirty:182: inode #15: comm syz.6.2684: mark_inode_dirty error [ 105.670794][ T6632] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 105.681098][ T6630] EXT4-fs error (device loop6) in ext4_do_update_inode:5350: error 27 [ 105.687482][ T6632] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 105.695852][ T6630] EXT4-fs error (device loop6): ext4_truncate:4396: inode #15: comm syz.6.2684: mark_inode_dirty error [ 105.714680][ T6630] EXT4-fs error (device loop6) in ext4_setattr:5721: error 27 [ 105.722496][ T6643] EXT4-fs error (device loop6) in ext4_do_update_inode:5350: error 27 [ 105.744004][ T1104] EXT4-fs warning (device loop6): ext4_evict_inode:286: couldn't mark inode dirty (err -27) [ 105.847236][ T6649] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 105.856681][ T6649] ext4 filesystem being mounted at /546/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.873509][ T607] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 105.934229][ T24] audit: type=1400 audit(2000000081.769:602): avc: denied { ioctl } for pid=6656 comm="syz.4.2693" path="socket:[36266]" dev="sockfs" ino=36266 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 106.094851][ T6665] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 106.105920][ T6665] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.183007][ T24] audit: type=1400 audit(2000000082.009:603): avc: denied { create } for pid=6677 comm="syz.9.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 106.223886][ T434] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 106.243623][ T607] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.254919][ T607] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.255490][ T6686] EXT4-fs (loop9): Ignoring removed oldalloc option [ 106.265853][ T607] usb 9-1: New USB device found, idVendor=a86d, idProduct=c626, bcdDevice= 0.00 [ 106.273981][ T6686] EXT4-fs (loop9): Journaled quota options ignored when QUOTA feature is enabled [ 106.280813][ T607] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.300502][ T607] usb 9-1: config 0 descriptor?? [ 106.308625][ T6686] EXT4-fs error (device loop9) in ext4_do_update_inode:5350: error 27 [ 106.317208][ T6686] EXT4-fs error (device loop9): ext4_dirty_inode:6157: inode #16: comm syz.9.2706: mark_inode_dirty error [ 106.328864][ T6686] EXT4-fs error (device loop9) in ext4_do_update_inode:5350: error 27 [ 106.337764][ T6686] EXT4-fs error (device loop9): __ext4_ext_dirty:182: inode #16: comm syz.9.2706: mark_inode_dirty error [ 106.350207][ T6686] EXT4-fs error (device loop9) in ext4_do_update_inode:5350: error 27 [ 106.358693][ T6686] EXT4-fs error (device loop9) in ext4_orphan_del:3292: error 27 [ 106.370500][ T6686] EXT4-fs error (device loop9) in ext4_do_update_inode:5350: error 27 [ 106.379219][ T6686] EXT4-fs error (device loop9): ext4_truncate:4396: inode #16: comm syz.9.2706: mark_inode_dirty error [ 106.392426][ T6686] EXT4-fs error (device loop9) in ext4_orphan_cleanup:3108: error 27 [ 106.401224][ T6686] EXT4-fs (loop9): 1 truncate cleaned up [ 106.406971][ T6686] EXT4-fs (loop9): mounted filesystem without journal. Opts: discard,oldalloc,data=journal,resgid=0x0000000000000000,grpjquota=./mnt,,errors=continue [ 106.427302][ T6686] ext4 filesystem being mounted at /94/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.473576][ T434] usb 5-1: Using ep0 maxpacket: 16 [ 106.593597][ T434] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.604705][ T434] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.784285][ T607] hid-generic 0003:A86D:C626.0023: unbalanced collection at end of report description [ 106.794656][ T607] hid-generic: probe of 0003:A86D:C626.0023 failed with error -22 [ 106.803584][ T434] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.813370][ T434] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.816517][ T6701] F2FS-fs (loop9): invalid crc value [ 106.828650][ T434] usb 5-1: Product: syz [ 106.832825][ T434] usb 5-1: Manufacturer: syz [ 106.838951][ T434] usb 5-1: SerialNumber: syz [ 106.846610][ T6701] F2FS-fs (loop9): Found nat_bits in checkpoint [ 106.894293][ T6701] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 107.012883][ T319] usb 9-1: USB disconnect, device number 5 [ 107.085058][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2723'. [ 107.143705][ T6738] netlink: 'syz.6.2727': attribute type 5 has an invalid length. [ 107.163562][ T434] usb 5-1: 0:2 : does not exist [ 107.168510][ T434] usb 5-1: unit 9 not found! [ 107.186209][ T434] usb 5-1: USB disconnect, device number 20 [ 107.198237][ T6742] netlink: 'syz.6.2729': attribute type 1 has an invalid length. [ 107.294308][ T24] audit: type=1326 audit(2000000083.129:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.6.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1681e69cb9 code=0x7ffc0000 [ 107.318275][ T24] audit: type=1326 audit(2000000083.149:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.6.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1681e69cb9 code=0x7ffc0000 [ 107.342380][ T24] audit: type=1326 audit(2000000083.169:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.6.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1681e69cb9 code=0x7ffc0000 [ 107.378407][ T24] audit: type=1326 audit(2000000083.169:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.6.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1681e69cb9 code=0x7ffc0000 [ 107.418866][ T24] audit: type=1326 audit(2000000083.169:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.6.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1681e69cb9 code=0x7ffc0000 [ 107.494818][ T6756] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2736'. [ 107.521659][ T6758] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2737'. [ 107.668029][ T6776] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2745'. [ 107.735520][ T6788] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 107.744890][ T6788] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.906252][ T6813] FAT-fs (loop9): Directory bread(block 64) failed [ 107.922968][ T6813] FAT-fs (loop9): Directory bread(block 65) failed [ 107.933085][ T6813] FAT-fs (loop9): Directory bread(block 66) failed [ 107.953228][ T6813] FAT-fs (loop9): Directory bread(block 67) failed [ 107.959920][ T6813] FAT-fs (loop9): Directory bread(block 68) failed [ 107.963523][ T297] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 107.966595][ T6813] FAT-fs (loop9): Directory bread(block 69) failed [ 107.980806][ T6813] FAT-fs (loop9): Directory bread(block 70) failed [ 107.987778][ T6813] FAT-fs (loop9): Directory bread(block 71) failed [ 107.994526][ T6813] FAT-fs (loop9): Directory bread(block 72) failed [ 108.001133][ T6813] FAT-fs (loop9): Directory bread(block 73) failed [ 108.021016][ T6819] EXT4-fs (loop4): orphan cleanup on readonly fs [ 108.038205][ T6819] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2765: bg 0: block 248: padding at end of block bitmap is not set [ 108.053564][ T6819] EXT4-fs error (device loop4): ext4_acquire_dquot:6225: comm syz.4.2765: Failed to acquire dquot type 1 [ 108.066209][ T6819] EXT4-fs (loop4): 1 truncate cleaned up [ 108.072349][ T6819] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 108.164640][ T6817] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 108.175407][ T6817] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 108.189164][ T6817] F2FS-fs (loop6): Found nat_bits in checkpoint [ 108.210594][ T6817] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 108.217676][ T297] usb 9-1: Using ep0 maxpacket: 8 [ 108.218246][ T6817] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 108.343871][ T297] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.373999][ T6835] rtc_cmos 00:00: Alarms can be up to one day in the future [ 108.433609][ T297] usb 9-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 108.447317][ T297] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 108.460662][ T297] usb 9-1: SerialNumber: syz [ 108.466292][ T297] usb 9-1: config 0 descriptor?? [ 108.515165][ T297] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 108.529731][ T297] uvcvideo: No valid video chain found. [ 108.736411][ T756] usb 9-1: USB disconnect, device number 6 [ 108.973529][ T297] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 109.023525][ T607] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 109.314909][ T6928] EXT4-fs (loop7): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000800,sb=0x0000000000000001,,errors=continue [ 109.329608][ T6928] ext4 filesystem being mounted at /368/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.347823][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.359366][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.359392][ T297] usb 5-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 109.359403][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.359960][ T297] usb 5-1: config 0 descriptor?? [ 109.372046][ T574] rtc_cmos 00:00: Alarms can be up to one day in the future [ 109.372447][ T574] rtc_cmos 00:00: Alarms can be up to one day in the future [ 109.391164][ T574] rtc_cmos 00:00: Alarms can be up to one day in the future [ 109.391407][ T574] rtc_cmos 00:00: Alarms can be up to one day in the future [ 109.411605][ T6946] option changes via remount are deprecated (pid=6944 comm=syz.7.2820) [ 109.418422][ T607] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 109.426018][ T6946] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 109.437784][ T607] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 109.459008][ T574] rtc rtc0: __rtc_set_alarm: err=-22 [ 109.459344][ T607] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 109.475564][ T607] usb 10-1: config 220 has no interface number 2 [ 109.483365][ T607] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 109.497311][ T607] usb 10-1: config 220 interface 0 has no altsetting 0 [ 109.504290][ T607] usb 10-1: config 220 interface 76 has no altsetting 0 [ 109.504883][ T6949] 9p: Unknown access argument _ [ 109.511279][ T607] usb 10-1: config 220 interface 1 has no altsetting 0 [ 109.673602][ T607] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 109.682999][ T607] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.691273][ T6964] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 109.699788][ T607] usb 10-1: Product: syz [ 109.704827][ T6964] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.706620][ T607] usb 10-1: Manufacturer: syz [ 109.720250][ T607] usb 10-1: SerialNumber: syz [ 109.834362][ T297] itetech 0003:06CB:2968.0024: unknown main item tag 0x2 [ 109.841653][ T297] itetech 0003:06CB:2968.0024: unbalanced delimiter at end of report description [ 109.851216][ T297] itetech: probe of 0003:06CB:2968.0024 failed with error -22 [ 109.863551][ T2992] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 109.944827][ T6988] EXT4-fs (loop7): Test dummy encryption mode enabled [ 109.951846][ T6988] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 109.964387][ T6988] EXT4-fs (loop7): 1 truncate cleaned up [ 109.970597][ T6988] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,journal_ioprio=0x0000000000000006,errors=remount-ro, [ 110.037461][ T574] usb 5-1: USB disconnect, device number 21 [ 110.044101][ T6994] netlink: 1040 bytes leftover after parsing attributes in process `syz.6.2844'. [ 110.054068][ T6996] netlink: 'syz.7.2843': attribute type 2 has an invalid length. [ 110.093669][ T607] usb 10-1: selecting invalid altsetting 0 [ 110.103146][ T607] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 110.112836][ T607] uvcvideo: No valid video chain found. [ 110.143591][ T2992] usb 9-1: Using ep0 maxpacket: 16 [ 110.144317][ T7005] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 110.164666][ T7005] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrquota,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf, [ 110.198105][ T607] usb 10-1: USB disconnect, device number 3 [ 110.204167][ T7007] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 110.216342][ T7007] ext4 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.241761][ T7015] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2850'. [ 110.263577][ T2992] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 110.273347][ T7019] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2852'. [ 110.278758][ T2992] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 110.298133][ T2992] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 110.324679][ T2992] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.347525][ T2992] usb 9-1: config 0 descriptor?? [ 110.375420][ T7027] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2853'. [ 110.384561][ T7027] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2853'. [ 110.477219][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 110.477230][ T24] audit: type=1400 audit(2000000086.309:636): avc: denied { setattr } for pid=7042 comm="syz.7.2864" name="RAW" dev="sockfs" ino=37568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.592147][ T7055] EXT4-fs (loop6): Ignoring removed orlov option [ 110.601449][ T7055] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 110.636370][ T7055] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 110.677475][ T7071] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.679809][ T7055] tmpfs: Cannot retroactively limit inodes [ 110.704336][ T7071] EXT4-fs error (device loop9): ext4_free_branches:1026: inode #11: comm syz.9.2877: invalid indirect mapped block 4294967295 (level 1) [ 110.723928][ T7071] EXT4-fs error (device loop9): ext4_free_branches:1026: inode #11: comm syz.9.2877: invalid indirect mapped block 4294967295 (level 1) [ 110.738456][ T7071] EXT4-fs (loop9): 2 truncates cleaned up [ 110.745018][ T7071] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000001007,dioread_nolock,bsdgroups,,errors=continue [ 110.814646][ T2992] lg-g15 0003:046D:C222.0025: unbalanced delimiter at end of report description [ 110.827154][ T2992] lg-g15: probe of 0003:046D:C222.0025 failed with error -22 [ 110.845612][ T7071] EXT4-fs error (device loop9): empty_inline_dir:1868: inode #12: block 7: comm syz.9.2877: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 110.881648][ T7071] EXT4-fs warning (device loop9): empty_inline_dir:1875: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 110.934884][ T7097] xt_hashlimit: size too large, truncated to 1048576 [ 111.017661][ T297] usb 9-1: USB disconnect, device number 7 [ 111.023967][ T7099] EXT4-fs (loop9): Ignoring removed orlov option [ 111.049698][ T7099] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.2889: inode #1: comm syz.9.2889: iget: illegal inode # [ 111.073710][ T7099] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.2889: error while reading EA inode 1 err=-117 [ 111.095129][ T7099] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.2889: inode #1: comm syz.9.2889: iget: illegal inode # [ 111.153300][ T7099] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.2889: error while reading EA inode 1 err=-117 [ 111.183780][ T7099] EXT4-fs (loop9): 1 orphan inode deleted [ 111.189581][ T7099] EXT4-fs (loop9): mounted filesystem without journal. Opts: nodioread_nolock,orlov,debug_want_extra_isize=0x000000000000004c,auto_da_alloc=0x00000000000007ff,resgid=0x0000000000000000,acl,usrjquota=,grpjquota=,usrquota,dioread_lock,,errors=continue [ 111.300794][ T24] audit: type=1400 audit(2000000087.129:637): avc: denied { ioctl } for pid=7111 comm="syz.7.2893" path="socket:[37693]" dev="sockfs" ino=37693 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.327133][ T24] audit: type=1400 audit(2000000087.129:638): avc: denied { getopt } for pid=7111 comm="syz.7.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.397647][ T7086] F2FS-fs (loop6): Found nat_bits in checkpoint [ 111.451596][ T7086] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 111.735009][ T24] audit: type=1404 audit(2000000087.569:639): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 111.761548][ T24] audit: type=1400 audit(2000000087.589:640): avc: denied { read write } for pid=5499 comm="syz-executor" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.785869][ T24] audit: type=1400 audit(2000000087.599:641): avc: denied { read write } for pid=3092 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.811345][ T24] audit: type=1400 audit(2000000087.619:642): avc: denied { read } for pid=7162 comm="syz.8.2916" dev="nsfs" ino=4026532363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 111.853390][ T24] audit: type=1400 audit(2000000087.619:643): avc: denied { create } for pid=7162 comm="syz.8.2916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 111.874060][ T24] audit: type=1400 audit(2000000087.629:644): avc: denied { read write } for pid=5499 comm="syz-executor" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.899759][ T24] audit: type=1400 audit(2000000087.629:645): avc: denied { create } for pid=7165 comm="syz.7.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 111.956915][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2933'. [ 112.011547][ T7213] device macsec2 entered promiscuous mode [ 112.225824][ T308] tipc: Left network mode [ 112.755030][ T308] device bridge_slave_1 left promiscuous mode [ 112.761217][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.768797][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.776582][ T308] device bridge0 left promiscuous mode [ 112.782083][ T308] device veth1_macvtap left promiscuous mode [ 112.788150][ T308] device veth0_vlan left promiscuous mode [ 113.203414][ T7279] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 115.361279][ T7305] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 116.272048][ T24] kauditd_printk_skb: 125 callbacks suppressed [ 116.272059][ T24] audit: type=1400 audit(2000000092.099:771): avc: denied { execmem } for pid=7312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 116.300316][ T24] audit: type=1400 audit(2000000092.129:772): avc: denied { read write } for pid=5681 comm="syz-executor" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 116.328376][ T24] audit: type=1400 audit(2000000092.129:773): avc: denied { create } for pid=7319 comm="syz.6.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 116.348086][ T24] audit: type=1400 audit(2000000092.129:774): avc: denied { read write } for pid=5681 comm="syz-executor" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 116.372265][ T24] audit: type=1400 audit(2000000092.159:775): avc: denied { read write } for pid=1104 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 116.396330][ T24] audit: type=1400 audit(2000000092.159:776): avc: denied { read write } for pid=3092 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 116.420504][ T24] audit: type=1400 audit(2000000092.159:777): avc: denied { read write } for pid=5499 comm="syz-executor" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 117.318271][ T24] audit: type=1400 audit(2000000093.139:778): avc: denied { create } for pid=7324 comm="syz.8.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 117.339537][ T24] audit: type=1400 audit(2000000093.139:779): avc: denied { create } for pid=7324 comm="syz.8.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 117.360537][ T24] audit: type=1400 audit(2000000093.139:780): avc: denied { read write } for pid=7325 comm="syz.7.2990" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 119.660988][ T7346] kernel profiling enabled (shift: 0) [ 119.667719][ T7349] netlink: 'syz.6.3001': attribute type 15 has an invalid length. [ 120.993710][ T7360] netlink: 'syz.8.3005': attribute type 6 has an invalid length. [ 121.307135][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 121.307146][ T24] audit: type=1400 audit(2000000097.139:810): avc: denied { read write } for pid=3092 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 121.830214][ T24] audit: type=1400 audit(2000000097.659:811): avc: denied { read write } for pid=5681 comm="syz-executor" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.397860][ T24] audit: type=1400 audit(2000000098.229:812): avc: denied { execmem } for pid=7364 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 122.435193][ T24] audit: type=1400 audit(2000000098.229:813): avc: denied { name_bind } for pid=7365 comm="syz.7.3008" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 122.456821][ T24] audit: type=1400 audit(2000000098.229:814): avc: denied { map_create } for pid=7370 comm="syz.9.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.476129][ T24] audit: type=1400 audit(2000000098.229:815): avc: denied { map_create } for pid=7370 comm="syz.9.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.495162][ T24] audit: type=1400 audit(2000000098.229:816): avc: denied { prog_load } for pid=7370 comm="syz.9.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 122.514100][ T24] audit: type=1400 audit(2000000098.229:817): avc: denied { read write } for pid=3092 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.538208][ T24] audit: type=1400 audit(2000000098.259:818): avc: denied { read write } for pid=7367 comm="syz.8.3009" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 122.562412][ T24] audit: type=1400 audit(2000000098.259:819): avc: denied { create } for pid=7369 comm="syz.6.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 125.558048][ T7391] tap0: tun_chr_ioctl cmd 1074025677 [ 125.563388][ T7391] tap0: linktype set to 769 [ 125.568085][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3018'. [ 125.577279][ T7395] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3018'. [ 127.263593][ T24] kauditd_printk_skb: 19 callbacks suppressed [ 127.263602][ T24] audit: type=1400 audit(2000000103.099:839): avc: denied { name_bind } for pid=7398 comm="syz.8.3023" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 127.299530][ T24] audit: type=1400 audit(2000000103.099:840): avc: denied { execmem } for pid=7396 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 127.319062][ T24] audit: type=1400 audit(2000000103.099:841): avc: denied { read write } for pid=1104 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 127.343344][ T24] audit: type=1400 audit(2000000103.129:842): avc: denied { read write } for pid=3092 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 127.367686][ T24] audit: type=1400 audit(2000000103.139:843): avc: denied { read write } for pid=5499 comm="syz-executor" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 127.392281][ T24] audit: type=1400 audit(2000000103.159:844): avc: denied { read write } for pid=5681 comm="syz-executor" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 129.093367][ T24] audit: type=1400 audit(2000000104.919:845): avc: denied { execmem } for pid=7405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 129.123719][ T24] audit: type=1400 audit(2000000104.949:846): avc: denied { read write } for pid=5499 comm="syz-executor" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 129.148353][ T24] audit: type=1400 audit(2000000104.959:847): avc: denied { read write } for pid=5681 comm="syz-executor" name="loop9" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 129.195811][ T24] audit: type=1400 audit(2000000105.029:848): avc: denied { read write } for pid=1104 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 131.008967][ T7421] netlink: 'syz.6.3032': attribute type 3 has an invalid length. [ 131.018695][ T7421] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3032'. [ 133.029468][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 133.029489][ T24] audit: type=1400 audit(2000000108.859:856): avc: denied { execmem } for pid=7428 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 133.050615][ T7435] pimreg: tun_chr_ioctl cmd 1074025677 [ 133.077435][ T24] audit: type=1400 audit(2000000108.859:857): avc: denied { create } for pid=7429 comm="syz.7.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 133.101664][ T24] audit: type=1400 audit(2000000108.869:858): avc: denied { read write } for pid=3092 comm="syz-executor" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 133.118047][ T7435] pimreg: linktype set to 270 [ 133.133366][ T24] audit: type=1400 audit(2000000108.889:859): avc: denied { read write } for pid=1104 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 133.157720][ T24] audit: type=1400 audit(2000000108.899:860): avc: denied { write } for pid=267 comm="syz-executor" path="pipe:[13995]" dev="pipefs" ino=13995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 133.203741][ T24] audit: type=1400 audit(2000000108.899:861): avc: denied { write } for pid=267 comm="syz-executor" path="pipe:[13995]" dev="pipefs" ino=13995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 133.233620][ T24] audit: type=1400 audit(2000000108.899:862): avc: denied { write } for pid=267 comm="syz-executor" path="pipe:[13995]" dev="pipefs" ino=13995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 133.257509][ T24] audit: type=1400 audit(2000000108.899:863): avc: denied { write } for pid=267 comm="syz-executor" path="pipe:[13995]" dev="pipefs" ino=13995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 133.280912][ T24] audit: type=1400 audit(2000000108.899:864): avc: denied { write } for pid=267 comm="syz-executor" path="pipe:[13995]" dev="pipefs" ino=13995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 133.304339][ T24] audit: type=1400 audit(2000000108.899:865): avc: denied { read write } for pid=7436 comm="syz.7.3039" name="loop7" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 134.374134][ T296] device bridge_slave_1 left promiscuous mode [ 134.380519][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.387975][ T296] device bridge_slave_0 left promiscuous mode [ 134.394222][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.402029][ T296] device veth1_macvtap left promiscuous mode [ 134.408112][ T296] device veth0_vlan left promiscuous mode [ 134.985038][ T296] tipc: Left network mode [ 136.024357][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.031768][ T296] device bridge_slave_0 left promiscuous mode [ 136.038008][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.045679][ T296] device bridge_slave_1 left promiscuous mode [ 136.051858][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.059425][ T296] device bridge_slave_0 left promiscuous mode [ 136.065624][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.073424][ T296] device bridge_slave_1 left promiscuous mode [ 136.079622][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.087218][ T296] device bridge_slave_0 left promiscuous mode [ 136.093390][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.101453][ T296] device veth1_macvtap left promiscuous mode [ 136.107472][ T296] device veth0_vlan left promiscuous mode [ 136.113309][ T296] device veth1_macvtap left promiscuous mode [ 136.119388][ T296] device veth0_vlan left promiscuous mode [ 136.125263][ T296] device veth1_macvtap left promiscuous mode [ 136.131240][ T296] device veth0_vlan left promiscuous mode